Fresh Devoured
DEVOURED
Agentic RL: Token-In, Token-Out Done Right

Agentic RL: Token-In, Token-Out Done Right

AI QG. Allouedec - TITO
Reinforcement learning with LLM agents can silently fail due to re-encoding decoded tokens, a problem addressed by the "Token-In, Token-Out" method.
What: The "Token-In, Token-Out (TITO)" approach ensures reinforcement learning gradients are computed on the exact tokens an LLM sampled, preventing silent token drift caused by re-encoding decoded tokens, which can break the math of the gradient signal. This method relies on chat templates having a "prefix-preserving" property for tool messages, common in most modern templates like Llama 3.1 and Qwen2.5.
Why it matters: This technical deep-dive reveals a critical, often overlooked vulnerability in training agentic LLMs, providing a robust and generalizable solution that simplifies the reinforcement learning loop design and is essential for ensuring the integrity of increasingly complex AI agents.
Takeaway: If implementing reinforcement learning with LLMs and tool use, ensure your training loop adheres to the "Token-In, Token-Out" principle to prevent token drift and unreliable gradients. Verify your chosen chat template is "prefix-preserving" for tool messages.
Decoder
  • Reinforcement Learning (RL): A type of machine learning where an agent learns to make decisions by performing actions in an environment to maximize a cumulative reward.
  • LLM (Large Language Model): A type of AI model trained on vast amounts of text data to understand and generate human-like language.
  • Tokenization: The process of breaking down raw text into smaller units called tokens (words, subwords, or characters), which are then converted into numerical IDs for the model.
  • Gradients: In machine learning, gradients are vectors of partial derivatives that indicate the direction and magnitude of the steepest increase in a function, used to update model parameters during training.
  • Prefix-preserving chat template: A property of a chat template where appending new messages (specifically tool results) to an existing conversation extends the tokenized representation of the conversation without changing its beginning portion.
  • Byte-pair encoding (BPE): A data compression algorithm often used for tokenizing text in LLMs, which works by iteratively replacing the most frequent pair of bytes with a single, unused byte.
Original article

You’re training an LLM with RL. Single-turn looks great: clean curves, sane rewards, things converge. But modern models are enhanced with tools, and that’s exactly what you want: to train an agent.

So you upgrade your training loop to allow the model to call a tool mid-rollout. You start with an easy task, and the curves get weird. Loss occasionally spikes for no obvious reason. And eventually it fails with a shape mismatch error.

What’s almost certainly going on: your rollout loop is silently violating the Token-In, Token-Out (TITO) invariant. You parsed the model’s response to detect tool calls, then re-tokenized the updated conversation for the next turn. Usually that round-trip gives back the same tokens. Sometimes it doesn’t, and the gradient ends up on a sequence the model never sampled. The code doesn’t crash, but the math is silently broken and the gradient signal becomes completely unreliable.

Two ways to fix it.

The first is to abstract the chat template behind a per-model interface. For every family you train on, you hand-code a renderer that knows how to format messages, parse completions, and bridge between turns without re-rendering. It’s tricky to get right. The renderers library does this. It works, and it covers the major open-weights families today. The cost is structural: every new model needs a new hand-coded renderer, and changes to any template propagate as ongoing maintenance.

The second is to design the training around one rule: never re-encode tokens you’ve decoded. Follow it, and the tricky edge cases vanish. You’re left with a single property to check on the chat template: it must be prefix-preserving for tool messages (we’ll explain). Turns out the vast majority of templates in the wild already satisfy it. This is Token-In, Token-Out done right, and that’s what this post is about.

Train on the model’s own tokens

tl;dr RL updates the model on the exact tokens it sampled, and nothing else. Simple now, load-bearing later.

Reinforcement learning, in one breath: you sample a prompt, the model generates a completion, you score the completion, you backprop the gradient through the model’s generated tokens.

Single-turn RL loop.
sample prompt [{"role": "user", "content": "What's 2+2?"}] tokenize prompt 1023421799 "<user>What's 2+2?</user><eos>" generate completion 4799 "4.<eos>" compute reward +1 backprop on assistant tokens ∇ on 4799

One detail matters more than it looks. The gradient is computed on the tokens the model generated. That sounds obvious. What else would you train on? It is obvious. Remember it anyway, because you’re going to break it sooner than you think.

Multi-turn doesn’t change much. The model is allowed to call a tool mid-rollout: it emits a tool call, something on the outside runs the tool, the result is appended back into the conversation, and the model picks up from there. The rollout is just longer now: a few model turns, a few tool turns, a final answer.

Multi-turn RL loop, with a tool call.
sample prompt [{"role": "user", "content": "What's 2+2?"}] tokenize prompt 1023421799 "<user>What's 2+2?</user><eos>" generate completion 50711399 "<tool_call>calc(2+2)</tool_call><eos>" execute tool and append result 6046199 "<result>4</result><eos>" generate completion 4799 "4.<eos>" compute reward +1 backprop on assistant tokens ∇ on 50711399 + 4799

The rule carries over: backprop on the tokens the model produced. Not the tool’s response (those didn’t come from the policy).

The takeaway is small and very specific: in RL, you optimize on the exact tokens the model produced. Right now it reads like a definition. Later in the post, it’s the thing that breaks.

Decoding doesn’t undo encoding

tl;dr Tokenization isn’t reversible: decode a sequence, re-encode the text, and you can land on different tokens.

Going from messages to tokens is mechanical: a chat template renders the messages into a string, then the tokenizer chops that string into integer IDs.

>>> from transformers import AutoTokenizer
>>> tokenizer = AutoTokenizer.from_pretrained("Qwen/Qwen2.5-0.5B-Instruct")
>>> messages = [
...     {"role": "user", "content": "What's 2+2?"},
...     {"role": "assistant", "content": "4."}
... ]
>>> tokenizer.apply_chat_template(messages, return_dict=False)
[151644, 8948, 198, 2610, 525, 1207, 16948, 11, 3465, 553, 54364, 14817, 13, 1446, 525, 264, 10950, 17847, 13, 151645, 198, 151644, 872, 198, 3838, 594, 220, 17, 10, 17, 30, 151645, 198, 151644, 77091, 198, 19, 13, 151645, 198]

Most of the time you don’t think about it. You feed messages, you get tokens, the model does its thing.

Multi-turn is where it starts to matter. When the assistant emits tokens, you don’t know whether it’s about to call a tool until you look. So you decode the generated IDs back into text, parse out the structure, dispatch the call. The pipeline runs backwards, conceptually.

The model can generate a response without calling a tool:

>>> output_ids = [19, 13, 151645]  # what the model just generated
>>> tokenizer.parse_response(output_ids)
{"role": "assistant", "content": "4."}

or it can call a tool:

>>> output_ids = [151657, 198, 4913, 606, 788, 330, 88821, 497, 330, 16370, 788, 5212, 9413, 788, 330, 17, 10, 17, 95642, 151658, 151645]
>>> tokenizer.parse_response(output_ids)
{'role': 'assistant', 'content': '', 'tool_calls': [{'type': 'function', 'function': {'name': 'calculator', 'arguments': {'expr': '2+2'}}}]}

Here’s the catch. Decoding isn’t injective. Multiple distinct token sequences can decode to the same string. Which means: take some tokens, decode them, encode the result back, and you may land on a different sequence than the one you started with.

Decode-then-re-encode lands on a different token sequence.

Here, briefly: byte-pair merges aren’t stable across token boundaries. Given a string, BPE has one canonical greedy segmentation, but many other valid segmentations exist. Anything you stack on top of that (JSON serialization with negotiable whitespace, argument ordering, boolean casing (false vs False), how special tokens get re-rendered after a parse) adds more degrees of freedom.

The natural-but-wrong loop

tl;dr Re-rendering the message list every turn drifts the tokens, so you backprop on a sequence the policy never produced.

The natural way to write the loop is the one you’d write on a Friday afternoon. Keep the conversation as a list of messages. Loop over turns. At each turn, render the conversation, generate, parse, append, repeat. When the model finishes, tokenize the whole thing and backprop.

The MITO loop, step by step.
sample prompt while model should generate a new turn: tokenize conversation so far generate tokens until model stops parse the response and append if there's a tool call: execute tool and append result else: stop compute reward tokenize the full conversation compute loss on the tokenized conversation backprop on assistant tokens user "What's 2+2?" assistant tool_call: calc(2+2) tool "4" assistant "It's 4." tokens 1023421799507113996046199875799

But it’s broken in two specific ways.

The first is small but unpleasant. When you tokenize the full conversation at the end, you’ve lost the per-turn boundaries. The trainer no longer knows which tokens came from the assistant and which came from the tool, and you only want to compute loss on the assistant turns. So you have to recover that mapping after the fact: walk the rendered string, find the role markers, figure out which token indices fall inside each assistant turn. Doable, but every chat template does this differently, and you end up writing a small parser per model family. The renderers library exists in part to do exactly this. It attaches a message_indices array to the rendered ids so each token knows which message it belongs to.

The second is much worse. You broke the rule sooner than you thought: re-tokenizing the conversation at the end can give you a slightly different token sequence than the one the model sampled. Same string, different integer ids. We saw why in the previous section: encode and decode aren’t inverses. Consequently, you backprop on these new ids. The gradient targets tokens the policy never produced. The rule from before breaks.

That’s the loop everyone writes first. And it’s why this post exists.

TITO Done Right

tl;dr Keep the sampled tokens in one buffer, never re-encode them, and both failure modes disappear.

The fix is one rule: never re-encode tokens you’ve decoded.

The model’s sampled tokens go straight into a running buffer, and that buffer is the source of truth. The messages list becomes bookkeeping. We do parse the sampled tokens. We have to, to know whether to dispatch a tool. But the parsed dict is for routing only. It never feeds back into the prompt.

The TITO loop: the buffer accumulates, nothing is re-encoded.
sample prompt tokenize prompt while model should generate a new turn: generate tokens, append to buffer parse the response if there's a tool call: execute tool, tokenize response, append to buffer else: stop compute reward compute loss on buffer backprop on assistant tokens user "What's 2+2?" assistant tool_call: calc(2+2) tool "4" assistant "It's 4." buffer 1023421799507113996046199875799

That single change solves both problems from the previous section.

The per-turn boundaries are never lost because they’re never recovered. They were known the moment each chunk was appended. The buffer keeps the structure as it grows: these tokens came from the prompt, these from the model, these from the tool, these from the model again. The loss mask is built as you go, not reconstructed afterwards from a re-rendered string.

The token drift is gone for the same reason. The buffer never gets re-encoded. The tokens the policy sampled are exactly the tokens under the gradient. Encoding and decoding are still non-injective. That hasn’t changed. But we never use the non-injective round-trip. We decode (for tool dispatch), use the result for routing, and throw it away. Nothing decoded ever goes back through encode.

The only chat-template operation left in the loop is “tokenize the tool response and append.” Everything else is token concatenation.

The tool-response delta

tl;dr The only template operation left: diff two dummy renders for the tool-response tokens, then append them by id.

The TITO loop has one chat-template operation left: tokenize the tool response and append it.

How do you go from the tool result (e.g., "4") to the full wrapped sequence the model expects (<|im_start|>user\n<tool_response>\n4\n</tool_response><|im_end|>\n<|im_start|>assistant\n)?

The way is to use the template only for the tool message. Render the conversation twice (with and without the tool), subtract, and the suffix is exactly the bridge you need to append.

>>> from transformers import AutoTokenizer
>>> tok = AutoTokenizer.from_pretrained("Qwen2.5-0.5B-Instruct")
>>> messages_prefix = [
...     {"role": "user", "content": "What's 2+2?"},
...     {"role": "assistant", "tool_calls": [
...         {"type": "function", "function": {"name": "calc", "arguments": {"expr": "2+2"}}}
...     ]},
... ]
>>> messages_full = messages_prefix + [{"role": "tool", "content": "4"}]
>>> prefix = tok.apply_chat_template(messages_prefix, return_dict=False)
>>> full = tok.apply_chat_template(messages_full, return_dict=False, add_generation_prompt=True)
>>> delta = full[len(prefix):]
>>> delta
[151644, 872, 198, 27, 14172, 9655, 397, 19, 198, 522, 14172, 9655, 29, 151645, 198, 151644, 77091, 198]
>>> tok.decode(delta)
'<|im_start|>user\n<tool_response>\n4\n</tool_response><|im_end|>\n<|im_start|>assistant\n'

That’s the entire template-aware part of the loop. The running buffer never sees a re-rendered version of anything the model sampled. It just gets delta appended.

The prefix doesn’t even have to be a real conversation. Any dummy that ends in an assistant tool call works, since the delta only depends on the tool message and the template’s transition logic, not on the prior turns.

The trick has one precondition: the chat template must be prefix-preserving for tool messages. Concretely:

>>> assert full[:len(prefix)] == prefix

If that fails, the subtraction lands on a corrupted suffix. That condition is the subject of the next section.

Prefix preservation

tl;dr It all rests on one property: appending a tool result must extend the render verbatim. Nearly every template already does.

The tool-response delta asks one thing of the chat template, and it’s worth stating precisely because the whole loop rests on it. Take any tool messages appended after an assistant tool call. Rendering the conversation with them must extend the render without them, token for token:

render([user, asst_with_tool_call, tool_result])  starts with  render([user, asst_with_tool_call])

That is the prefix-preservation property, and the striking thing is how narrow it is. It is required only for tool messages. The template is free to do whatever it likes everywhere else (collapse old thinking, rewrite the system prompt, reorder fields) as long as appending a tool result never disturbs bytes it already emitted. User, assistant, and system turns are under no such obligation.

Checking it is a property test, not a proof. Render the prefix, render the extension, compare:

def is_chat_template_prefix_preserving(tokenizer) -> bool:
    dummy_tool_calls = [{"type": "function", "function": {"name": "dummy", "arguments": {}}}]
    messages1 = [
        {"role": "user", "content": "dummy"},
        {"role": "assistant", "content": "", "tool_calls": dummy_tool_calls},
    ]
    messages2 = [
        {"role": "user", "content": "dummy"},
        {"role": "assistant", "content": "", "tool_calls": dummy_tool_calls},
        {"role": "tool", "name": "dummy", "content": "dummy"},
    ]
    ids1 = tokenizer.apply_chat_template(messages1, tokenize=True, return_dict=False)
    ids2 = tokenizer.apply_chat_template(messages2, tokenize=True, return_dict=False, add_generation_prompt=True)
    return ids2[: len(ids1)] == ids1

Twelve lines, milliseconds to run, and you can point it at any model the day it ships. So does the property hold in the wild? We ran it across the open-weights families people actually reach for in agentic RL:

family prefix-preserving for tool messages?
Qwen2.5
Qwen2.5-Coder
Qwen3 ❌ (one-line fix below)
Qwen3 Instruct (2507)
Qwen3-VL
Qwen3.5 (think and non-think variants)
Qwen3.6
DeepSeek-V3.1
DeepSeek-R1
DeepSeek-R1-0528
Llama 3.1
Llama 3.2
Llama 4
Gemma 4
Function Gemma
gpt-oss
GLM-4.5
GLM-5
MiniMax-M2.1

Eighteen of nineteen, untouched. The property isn’t fragile or rare, it’s the quiet default. That’s the load-bearing observation for everything that came before: prefix preservation for tool messages is a weak, narrowly-scoped condition modern templates satisfy almost by accident, not a demanding one that justifies reimplementing the template per family.

Then there’s Qwen3. Easiest way to see what’s going on is to render the dummy conversation and inspect the output, before and after appending the tool message:

>>> from transformers import AutoTokenizer
>>> tokenizer = AutoTokenizer.from_pretrained("Qwen/Qwen3-4B")
>>> dummy_tool_calls = [{"type": "function", "function": {"name": "dummy", "arguments": {}}}]
>>> messages1 = [
...     {"role": "user", "content": "dummy"},
...     {"role": "assistant", "content": "", "tool_calls": dummy_tool_calls},
... ]
>>> messages2 = messages1 + [{"role": "tool", "name": "dummy", "content": "dummy"}]
>>> print(tokenizer.apply_chat_template(messages1, tokenize=False))                                # left column below
>>> print(tokenizer.apply_chat_template(messages2, tokenize=False, add_generation_prompt=True))    # right column below
apply_chat_template(messages1) apply_chat_template(messages2) <|im_start|>user <|im_start|>user dummy<|im_end|> dummy<|im_end|> <|im_start|>assistant <|im_start|>assistant <think> </think> <tool_call> <tool_call> {"name": "dummy", "arguments": {}} {"name": "dummy", "arguments": {}} </tool_call><|im_end|> </tool_call><|im_end|> <|im_start|>user <tool_response> dummy </tool_response><|im_end|> <|im_start|>assistant

The first one slips an empty <think>...</think> block in front of the tool call; the second drops it. The prefix breaks at that exact spot.

One Jinja conditional gates this:

{%- if loop.last or (not loop.last and reasoning_content) %}

When reasoning_content is empty, the <think> block renders only on the last assistant turn. Appending a tool result demotes that turn from being last, and the block disappears.

The fix is one line:

- {%- if loop.last or (not loop.last and reasoning_content) %}
+ {%- if true %}

It costs nothing at inference and restores prefix preservation for training. Qwen3: ✅

Do you need a renderer for this?

tl;dr A per-model renderer guards against re-encoding bugs TITO never has; the lone real requirement is the property from the previous section.

There’s a heavier alternative to the loop above. Instead of a ten-line compute_delta, you build a renderer: a per-model object that owns the messages-to-tokens boundary. It renders messages, parses completions, and exposes a bridge_to_next_turn(prev_prompt_ids, prev_completion_ids, new_messages) that extends the sampled stream byte-for-byte (or returns None when it can’t prove the extension is safe). One is hand-coded per model family. The renderers library ships them for Qwen3, GLM, DeepSeek-V3, Kimi, gpt-oss and a dozen others; tinker-cookbook ships its own variant.

The same turn-to-turn step under each design. Both arrive at the same token stream; the difference is where the chat-template logic lives.
one turn → next turn, viewed by each design renderers prev_prompt_ids ++ prev_completion_ids p₁p₂p₃c₁c₂c₃ + new_messages Renderer.bridge_to_next_turn hand-coded per family · returns Δ or None Δ ids next_prompt_ids p₁p₂p₃c₁c₂c₃d₁d₂ extends prev stream byte-for-byte TITO buffer (single stream) p₁p₂p₃c₁c₂c₃ parse c₁..c₃ for dispatch only compute_delta(messages, tok) ~10 lines · shared across all models Δ ids buffer += Δ p₁p₂p₃c₁c₂c₃d₁d₂ nothing re-encoded · loss mask grows with the buffer Both paths arrive at the same token stream. The difference is where the chat-template logic lives: inside a per-family Renderer object, or inside one shared compute_delta the trainer calls.

Both paths start from the same (prev_prompt_ids, prev_completion_ids) and end at the same extended stream. The only difference is where the template logic lives: inside a hand-coded per-family object, or inside the one shared compute_delta the trainer already calls. The renderer route buys things: a unified API across model families, a message_indices array that gives you loss masks by indexing, a bridge that fails loud rather than drifting silently, and the ability to work when you don’t control the inference endpoint. If you’re plugging into a vendor API that only speaks messages (not tokens), that is not nothing. And the logic lives in Python rather than Jinja: something you can read, test, and step through in a debugger, which the template it replaces (you saw a slice of that Jinja in the Qwen3 fix above) is not.

For RL specifically, most of those are guards against problems TITO never has, and the ergonomic pull rarely gets spent: Python beats Jinja only when you reimplement the template, and TITO doesn’t. BPE retokenization drift, canonicalization, JSON whitespace: they only bite a pipeline that re-encodes a string it got from decode. TITO never does, so even a non-canonical sample ([he][llo] where the canonical encoding is [hello]) stays verbatim in the buffer, exactly the tokens under the gradient. It is also why the one property we do need can be checked at the token level rather than the text level: the test runs on a canonical dummy where the two coincide, and the delta is appended by plain id concatenation at an atomic special-token seam (<|im_end|> then <|im_start|>, neither merges). That property, prefix preservation for tool messages, is the whole and only requirement.

The honest edges

tl;dr Two places reality pushes back: history rewriting genuinely breaks the math, truncation barely registers.

History rewriting

A growing class of agents edit their own past as they go. Z.ai’s reasoning models ship a clear_thinking flag that strips <think> blocks from every turn but the last. Long-running coding agents (Claude Code, aider, Codex) compact the conversation when it nears the context limit, replacing dozens of past turns with a short summary. Sub-agent setups go further: a child agent runs, produces a long trace, and only its distilled summary makes it back to the parent. Useful, increasingly standard, and all the same thing under the hood: at some point in the rollout, the tokens that came out of the model are no longer the tokens that go back in.

That breaks TITO at the source. The rule we started with was you optimize on the exact tokens the model produced. The “previous turn” the next step is conditioned on never existed as a sampled trajectory, and the PPO/GRPO importance ratio has nothing to say about a Frankenstein prompt the policy never generated. The objective itself is undefined, not just the implementation.

The workaround keeps what you can justify and drops the rest, and it doesn’t care which kind of history rewriting happened. Pick the last point in the rollout where the past was edited (a compaction, a clear_thinking strip, a sub-agent summary, anything) and freeze everything before it as prompt. Loss mask is zero across the frozen part, so prefix preservation and BPE drift no longer apply to it: it’s just a prompt the trainer happened to construct in a funny way. Everything after is genuine sampled tokens, still under the gradient, still TITO.

Compaction here as a stand-in for any history rewrite: clear_thinking, sub-agent summarization, anything that replaces past tokens. The mask treats everything up to and including the rewrite as prompt; only what came after carries loss.
sampling… compacting… sampling… what the trainer can use prompt asst 1 tool asst 2 tool asst 3 compaction summary asst 4 tool asst 5 loss is computed here

The price is the obvious one: the further along the last rewrite lands, the shorter the loss-bearing tail. A long trajectory with periodic rewrites can leave you training on the final few hundred tokens out of tens of thousands sampled.

Truncation

A rollout that hits max_seq_len mid-turn ends without its canonical close token. For a renderer, that’s a real problem. The bridge anchors on that token to extend the stream byte-for-byte; with it missing, the bridge can’t prove a safe extension, returns None, and the caller falls back to a full re-render, which re-triggers exactly the drift modes the renderer was built to prevent. The fix is to teach each renderer to recognize a truncated tail and synthesize its own close token there as non-loss context. Another defense, another per-model file, another set of tests.

Under TITO it’s a non-event. Generation hits the limit, the buffer ends, the rollout terminates. Mid-reasoning, the dangling <think> never needs to close: the tokens are in the buffer as the model produced them, and the loss mask doesn’t care that the structure doesn’t parse. Mid-tool-call, the parser sees an incomplete block and dispatches nothing; there was no budget left for the tool’s result anyway. Nothing on our side of the page, because there was nothing to defend.

The right primitive

You don’t need to reimplement a chat template to train on it, as long as you hold the tokens. (When you don’t, say you’re training against an endpoint that only speaks messages, a renderer is the right and maybe only tool.) You need to know one thing about the template: does appending a tool result extend the render token-for-token? If the answer is yes (it usually does), and you’ve followed the main rule of “never re-encode tokens you’ve decoded,” then your training loop is already correct. The only thing left is to implement the tool-response delta, which is a few lines of code.

DEVOURED
Claude Opus 4.8: The System Card

Claude Opus 4.8: The System Card

AI TheZvi
Anthropic's Claude Opus 4.8, released only six weeks after 4.7, shows incremental honesty improvements but significant regressions in prompt injection and computer use safety, as detailed in its 244-page system card.
What: Claude Opus 4.8 is an incremental update to Anthropic's LLM, demonstrating enhanced honesty and prosocial behaviors, and increased awareness of evaluators. However, it exhibits regressions in prompt injection robustness (false negatives rose from 0.07% to 0.26% compared to Opus 4.7) and malicious computer use safety, attributed to Anthropic removing adversarial training to boost honesty. The model remains behind the unreleased 'Mythos'.
Why it matters: This system card provides a transparent look at the complex tradeoffs in LLM development, illustrating how efforts to improve one safety aspect, like honesty, can unintentionally degrade others, such as resistance to prompt injection. It highlights the ongoing challenges in balancing capability, safety, and alignment in rapidly evolving AI models.
Takeaway: If relying on Claude for agentic tasks involving sensitive data or computer interaction, be aware of the noted regressions in prompt injection and computer use safety for Opus 4.8, and consider older versions or additional safeguards for such applications.
Deep dive
  • Claude Opus 4.8 was released only six weeks after Opus 4.7, with incremental upgrades in intelligence and task duration.
  • It comes with a 244-page system card, detailing changes and risks compared to 4.7 and the unreleased Mythos model.
  • Cyber capabilities of Opus 4.8 are better than 4.7 but still well behind Mythos, which seems to be an outlier.
  • Anthropic updated its Responsible Scaling Policy (RSP) to v3.3, raising the threshold for novel biological/chemical threats, which some critics argue weakens safety standards.
  • The model showed improvements in honesty, especially agentic honesty, and prosocial actions, creativity, and humor.
  • Notable regressions include prompt injection robustness (false negatives up from 0.07% in Opus 4.7 to 0.26%) and malicious computer use safety.
  • Anthropic attributes these regressions to the removal of training on business techniques and adversarial agents in Opus 4.8, as this training inadvertently contributed to dishonesty in Opus 4.7.
  • Opus 4.8 demonstrated higher "verbalized evaluation awareness" in training, speculating about graders and hidden tests in 0.1% of episodes, with unverbalized awareness in 5% and "exploitative" awareness in 0.5% of cases.
  • The model can distinguish fully-simulated evaluation sessions from real use, making it challenging to create realistic tests for advanced AIs.
  • The report highlights that alignment techniques are improving, but capabilities are improving faster, leading to a slow rise in alignment risks.
Decoder
  • System Card: A detailed document published by AI developers (like Anthropic) outlining the capabilities, limitations, risks, and safety measures of a specific AI model.
  • Anthropic's Responsible Scaling Policy (RSP): A framework developed by Anthropic to assess and manage the risks associated with increasingly powerful AI models, particularly as they scale in capabilities.
  • Prompt Injection: A security vulnerability in LLMs where a user's input (prompt) can "inject" malicious instructions that override or manipulate the model's intended behavior or system prompts.
  • Agentic Safety: The safety considerations for AI models that can act autonomously or take actions on behalf of a user, especially in environments involving tools or external systems.
  • Chain of Thought (CoT): A prompting technique for LLMs that encourages the model to explain its reasoning steps, leading to more accurate and verifiable answers.
  • SAEs (Sparse Autoencoders): A technique used in interpretability research to understand the internal representations of neural networks by finding sparse sets of features.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
ECC (GitHub Repo)

ECC (GitHub Repo)

AI GitHub
The ECC (Enterprise Command Center) agent workflow system has reached v2.0.0-rc.1, offering a comprehensive, cross-harness framework for agentic work with skills, memory, and security features.
What: ECC, with over 182,000 GitHub stars and 170+ contributors, is an operator system for agentic work that supports multiple AI agent harnesses like Codex, Claude Code, Cursor, and Gemini. Version 2.0.0-rc.1 introduces the Hermes operator story, enhanced desktop dashboard, and Rust control-plane prototype.
Why it matters: ECC's focus on a "harness-native operator system" across diverse AI agent platforms (like Claude Code, Cursor, OpenCode) highlights the emerging need for standardized, portable, and production-ready frameworks that can manage and orchestrate agents regardless of the underlying AI model or IDE.
Takeaway: Explore ECC's guides (Shorthand, Longform, Security) to understand how to build and deploy complex, production-ready AI agents across various development environments.
Deep dive
  • ECC is a comprehensive system for multi-harness agent workflows, built from real-world engineering use cases over 10+ months.
  • It includes skills, instincts, memory optimization, continuous learning, and security scanning.
  • ECC works across numerous AI agent platforms including Codex, Claude Code, Cursor, OpenCode, Gemini, Zed, and GitHub Copilot.
  • Version 2.0.0-rc.1, released April 2026, introduces the public Hermes operator story and a Tkinter-based desktop dashboard (ecc_dashboard.py).
  • The system now includes 63 agents, 249 skills, and 79 legacy command shims, with selective installation based on manifests.
  • A Rust control-plane prototype (ecc2/) is available in alpha, offering commands like dashboard, start, sessions, and status.
  • ECC Pro is a hosted GitHub App for private repositories, funding the open-source development.
  • Key features include token optimization, memory persistence with automatic context saving, continuous learning via auto-extracted patterns, and verification loops.
  • The system includes a security guide covering attack vectors, sandboxing, sanitization, and AgentShield integration.
  • Cross-platform support for Windows, macOS, and Linux, with hooks and scripts rewritten in Node.js for compatibility.
  • Multi-model commands like /multi-plan require an additional ccg-workflow runtime installation.
Decoder
  • Agent Harness: An environment or platform (e.g., Claude Code, Cursor, Gemini) that hosts and runs AI agents, providing them access to tools and context.
  • Skills: Pre-defined workflows or domain knowledge modules that an AI agent can utilize to perform specific tasks.
  • Instincts: Patterns or behaviors learned by an agent, potentially through continuous learning, influencing its future actions.
  • MCP: Refers to a system for pulling outside data, in this context, similar to how NotebookLM's 'Connectors' feature works.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
How to Automate AI Model Documentation with the NVIDIA MCG Toolkit

How to Automate AI Model Documentation with the NVIDIA MCG Toolkit

AI NVIDIA Developer
NVIDIA launched its Model Card Generator (MCG) toolkit, automating the creation of comprehensive AI model documentation in Model Card++ format, improving transparency and regulatory compliance by extracting data directly from code.
What: NVIDIA's MCG toolkit, developed by Pratyusha Maiti and Michael Boone, automates the generation of AI model documentation, producing detailed Model Card++ format cards in under a minute by analyzing source code and associated files. It uses a three-stage Ingestion, Extraction, and Rendering pipeline, leveraging NVIDIA Inference Microservices (NIM) and GPT-OSS-120B for data retrieval and content generation, and is being adopted by Oracle for its OCI AI infrastructure.
Why it matters: As AI models become more complex and regulations like the EU AI Act tighten, the need for auditable, consistent documentation becomes critical, driving a trend towards automated solutions that reduce manual effort and ensure compliance and transparency across diverse industry standards.
Takeaway: If your team struggles with manual AI model documentation, consider exploring NVIDIA's MCG toolkit or its open-source Model Card++ templates on GitHub for improved compliance and transparency.
Deep dive
  • The MCG toolkit is a containerized pipeline that reads model source code and associated files to generate documentation.
  • It operates in three stages: Ingestion (fetches and chunks content), Extraction (uses RAG with NIM and GPT-OSS-120B to generate structured JSON), and Rendering (converts JSON to Markdown).
  • The toolkit produces an overview and four subcards: Bias, Explainability, Privacy, and Safety & Security, compliant with Model Card++ format.
  • It supports customization of language models, templates, and field-level guides to adapt to different compliance needs without altering core extraction logic.
  • Performance tests showed it generates a full model card in under a minute for most repositories, with a 91% completion rate and 76% accuracy, varying based on the quality of source documentation.
  • If information is sparse, it flags gaps rather than guessing, serving as both a generator and a gap-finder for documentation.
  • Oracle is an early adopter, integrating MCG into its OCI AI offering to enhance model documentation and optimize GPU resource utilization.
Decoder
  • Model Card: A structured document providing transparency and context about an AI model, detailing its purpose, training data, performance metrics, ethical considerations, and limitations, as proposed by Google.
  • Model Card++: An extended version of the original Model Card concept, offering more detailed fields and subcards (e.g., for Bias, Explainability, Privacy, Safety & Security) to meet increasingly stringent regulatory and transparency requirements.
  • Retrieval-Augmented Generation (RAG): An AI framework that enhances the output of a large language model by retrieving relevant information from an external knowledge base before generating a response, improving accuracy and reducing hallucinations.
  • NVIDIA Inference Microservices (NIM): A suite of optimized microservices from NVIDIA for deploying and scaling AI models, including capabilities for embeddings and reranking in RAG pipelines.
  • GPT-OSS-120B: A specific large language model used by NVIDIA for core extraction and content generation within the MCG toolkit.
Original article

How to Automate AI Model Documentation with the NVIDIA MCG Toolkit

AI-Generated Summary

  • NVIDIA's Model Card Generator (MCG) toolkit automates and standardizes the creation of comprehensive AI model documentation in Model Card++ format, improving transparency and regulatory compliance by extracting information directly from source code and associated files.
  • The MCG pipeline operates in three stagesIngestion, Extraction, and Renderingleveraging NVIDIA Inference Microservices and GPT-OSS-120B for high-precision data retrieval, content generation, and formatting, producing overview and four subcards covering Bias, Explainability, Privacy, and Safety & Security.
  • Customization options include configurable language models, templates, and field-level guides, allowing organizations to adapt the toolkit for different compliance needs and industry standards without altering core extraction logic.
  • Performance testing shows the toolkit generates model cards quickly (under a minute for most repositories) with a completion rate of 91% and accuracy of 76%, though results depend heavily on the availability and quality of supporting documentation.
  • When documentation is sparse or absent, the toolkit flags missing information instead of guessing, serving as both a documentation generator and a gap-finder to assist teams in maintaining up-to-date, auditable model records.
  • Oracle is a key early adopter, integrating the MCG toolkit into its OCI AI infrastructure to enhance model documentation and GPU resource optimization within dedicated AI clusters and cloud environments.

AI-generated content may summarize information incompletely. Verify important information. Learn more

As AI models grow in complexity and regulatory scrutiny intensifies under frameworks including  California’s AB-2013 and the EU AI Act, software teams face a challenge beyond delivering great code: They need to produce comprehensive, auditable model documentation before the models are released.

Model cards describe how a model works, its intended use and license, training data, performance, and limitations. They promote transparency and accountability so downstream users—customers, regulators, and affected communities—can make informed decisions when selecting and deploying AI. That audience extends beyond developers: Policymakers, procurement teams, and risk assessors rely on model cards to evaluate fitness for use and compare models across vendors.

In practice, creating model cards manually is tedious and slow. Documentation lags behind development, and metadata is often outdated by ship date. As models grow more complex, inconsistent formatting and missing required fields create unnecessary audit risk and slow adoption. The NVIDIA model card generator (MCG) toolkit automates and standardizes model documentation in Model Card++ format in under a minute, by reading directly from source data.

Introducing the NVIDIA MCG toolkit

The MCG toolkit is a containerized pipeline that automates the generation of model cards by reading in the model source code. It follows a modular Ingestion → Extraction → Rendering pipeline. A central orchestrator receives your request—either a URL or an uploaded file—coordinates the workflow, and returns a complete model card. Each stage runs as a separate service, so you can update or swap individual components without affecting the rest of the pipeline.

How the MCG toolkit works

The toolkit exposes an interactive UI that accepts a URL (GitHub, GitLab, HuggingFace, or any public web page) or an uploaded file (ZIP, PDF, DOCX, or Markdown). A REST API is also available for programmatic integration. 

From there, data flows through three stages:

  1. Input → Ingestion. The system fetches the content and processes it into document chunks, categorized by type: documentation, config files, and code.
  2. Documents → Extraction. The extraction stage runs ingested documents through a retrieval-augmented generation (RAG) pipeline powered by NVIDIA Inference Microservices (NIM). NVIDIA Nemotron RAG  handles high-precision embedding (llama-nemotron-embed-1b-v2) and reranking (llama-nemotron-rerank-500m-v2), with separate retrievers for code, config files, and documentation to prioritize higher-signal sources. The core extraction is performed by GPT-OSS-120B, which reads the retrieved passages and applies expert-curated formatting and content guides—the NVIDIA MC++ template and field-level style guides—to generate compliant information in the expected format. A validation step checks responses before they are accepted. Output is structured JSON. After the overview is complete, the same content flows to a subcards stage, which produces the four Model Card++ subcards: Bias, Explainability, Privacy, and Safety & Security.
  3. JSON → Rendering. The structured JSON renders into human-readable Markdown using a configurable template. You can edit the content in the interface and re-render before downloading or integrating with other systems. The final artifact is a complete model card – overview plus four subcards – ready for review or publication.
A flowchart diagram showing the Model Card Generation toolkit architecture. Source code inputs such as GitHub repository, GitLab repository, HuggingFace repository, website URL, or local files flow through document-specific parsing, then through llama-nemotron-embed-1b-v2 for embedding into a vector database. A Retriever component (containing Code Retriever, Config Retriever, and Document Retriever) queries the vector database and passes results to llama-nemotron-rerank-500m-v2 for reranking. The reranked results feed into Llama-3.3-Nemotron-Super-49B-v1, which validates responses in a feedback loop, then passes output to an Orchestration step. The Template Renderer produces the final Model Card
Figure 1. MCG toolkit architecture: Generate a comprehensive model card by directly reading in the source code

Designed for flexibility

You’re not locked into one model, template, or standard. The toolkit is customizable across three dimensions:

1) Models: The system uses configurable endpoints for the language model, embeddings, and reranking. Point to different NIMs or compatible APIs to match your performance, cost, or data residency requirements, whether you’re prototyping on a smaller model or scaling up for production.

2) Templates: The output format is driven by a Markdown template. Organizations can customize it for Model Card++, internal standards, or emerging regulatory formats without modifying the extraction logic. Outputs are also CycloneDX-compliant. When a new disclosure requirement appears, you update the template rather than the pipeline.

3) Guides: Field-level guidance—what to capture, how to phrase it—comes from configurable knowledge bases. As regulations or domain needs evolve, update the guides without touching the core code. The same pipeline can serve different industries and compliance regimes.

Run it where you need it

The toolkit ships as containerized services with a one-command setup. The orchestrator, ingestion, extraction, and subcards stages each run as separate containers, with infrastructure (database and task queue) included. There’s no proprietary cloud lock-in: MCG runs on-premises or in your own cloud, with Kubernetes support to help you spin up on your own infrastructure.

Performance results

We ran the toolkit through standardized testing on public model repositories to measure completion rate, generation time, and accuracy. Each field was scored against the source documentation. Accuracy is calculated as correct fields over non-placeholder fields. Table 1, below, shows the results.

Model Time to Generate Completion Rate Accuracy
NVIDIA Nemotron Nano 8B 56s 97% 92%
NVIDIA Cosmos Reason 2 86s 94% 82%
NVIDIA Parakeet 65s 92% 87%
NVIDIA Proteina 52s 94% 82%
Third-party models(DeepSeek-V3, Evo2, Gemma, Llama) ~80s avg ~89% ~80%
Table 1. Performance on MC++ Overview across standardized test models. Completion rate = fields with meaningful content / total fields. Accuracy = correct / total non-placeholder responses.

The toolkit generates a full model card (overview plus four subcards) in under a minute for most repositories. Overall completion reaches 91% (third-party baseline), with accuracy at 76% across the standardized test set. Completion and accuracy vary by model and repository; repositories with richer READMEs and config files yield higher results.

The toolkit performs best when supporting documentation exists and the codebase is well-structured, using code analysis to supplement where possible. When documentation is sparse or absent, fewer fields are populated and rather than guessing, the system surfaces “not found” or “information not available” to flag gaps for human review.

We also tested what happens when documentation is removed entirely. Using the same repositories from our standard test set, we stripped all .pdf, .md, and .txt files and re-ran the toolkit against code alone. Across five models, average completion rate dropped to 61% from 91%, and strict accuracy, measured only over verifiable fields, fell to 28%, compared with 76% in the standard test that scores accuracy over completed fields only.

The 61% completion shows the toolkit still extracts meaningful signals from code, config files, and repository structure alone; the accuracy drop reflects how much documentation contributes to getting those fields right. 

Critically, the toolkit doesn’t compensate by guessing. If it cannot confidently populate fields, they are surfaced as “not found” or “information not available,” making it a useful gap-finder for teams whose documentation is still being written, as well as a generator for teams whose documentation is complete.

Early adopters and industry partners

Oracle is among our first partners to integrate the MCG Toolkit into production infrastructure. As part of their OCI AI offering, which spans GPU configurations from the A10 to the GB200 NVL72, Oracle deployed the toolkit combination of OCI container engine for Kubernetes and AI offerings, running MCG pods and NIM pods within a standard VCN architecture backed by Object Storage for the NIM models.

Their deployment uses Llama-3.3-Nemotron-Super-49B-v1 as the core extraction model, with Nemotron RAG handling embedding and reranking. GPT-OSS-120B model was hosted and tested on both the dedicated AI cluster with 2xH100 cards as well as the on-demand offering of the model. OCI supports increasingly powerful GPU infrastructure for large-scale AI training and inference, the need for consistent, auditable model documentation grows alongside it.

An OCI Dedicated AI Cluster (DAC) is a private, fully managed generative AI environment with its own dedicated GPUs, endpoints, and security boundary inside OCI. The MCG toolkit brings not only AI transparency tooling directly into that workflow without requiring customers to build it themselves but also the ability for customers to identify the optimal GPU configuration that is needed for hosting the models both in the OCI Dedicated AI cluster environments and baremetal GPU infrastructure.

Getting started

If you’d like to be an early adopter, reach out to the Trustworthy AI team. We’re happy to discuss partnerships.

Not ready for the fully automated toolkit? The Trustworthy AI GitHub repository has open source Model Card++ templates and AI transparency cards for blueprints, datasets, containers, and systems you can use today.

Documentation should keep pace with the models you ship. Whether you adopt the MCG toolkit or start with our open source templates, NVIDIA’s Trustworthy AI initiative is committed to making that easier.

Tags

Trustworthy AI / Cybersecurity | General | Nemotron | Intermediate Technical | Announcement | Deep dive | Machine Learning & Artificial Intelligence | Trustworthy AI

About the Authors

About Pratyusha Maiti

Pratyusha is the software engineer for trustworthy AI products at NVIDIA, where she is responsible for the development of tools advancing transparency and documentation in AI systems. Prior to NVIDIA, she was a research scientist at Georgia Institute of Technology, where she led the development of AI-powered virtual teaching assistants for online classrooms. She combines her expertise in language modeling and AI evaluation with a commitment to developing trustworthy AI tools that prioritize transparency, safety and responsible deployment. View all posts by Pratyusha Maiti

About Michael Boone

Michael Boone is the Manager for Trustworthy AI Product at NVIDIA. He is responsible for building NVIDIA’s technology according to its guiding principles—driving the implementation of products, tools, and processes that enable the company, its customers, and the larger ecosystem to deploy AI with confidence. Beginning his career as a licensed civil engineer, Michael pivoted from transportation infrastructure project management and operations to owning NVIDIA’s global core computer vision product marketing strategy, as well as product feature definition for DRIVE AV. Michael brings a safety-first engineering mindset to the AI frontier, drawing on his background in physical infrastructure to ensure digital systems are built with the same principle and rigor. An inventor and car enthusiast, Michael is a highly trusted collaborator and a leading voice in the deployment of emerging technology across public, private, and research environments. View all posts by Michael Boone

DEVOURED
Here's why the failure of Blue Origin's New Glenn rocket is so catastrophic

Here's why the failure of Blue Origin's New Glenn rocket is so catastrophic

Tech Ars Technica
Blue Origin's New Glenn rocket exploded during a static-fire test, severely damaging its sole launch pad and causing catastrophic delays for NASA's Moon Base and Artemis programs.
What: Blue Origin's New Glenn rocket suffered a devastating explosion during a static-fire test at Cape Canaveral Space Force Station, LC-36A, causing significant damage to the launch site. This failure will delay New Glenn's availability by at least a year and impacts NASA's Moon Base I mission and future Artemis crewed missions, which relied on Blue Moon Mark 1 landers.
Why it matters: This incident highlights the fragility of complex space launch infrastructure and how a single failure can cascade into significant delays and dependencies across major national space programs like Artemis, increasing reliance on competitors like SpaceX.
Deep dive
  • Blue Origin's New Glenn rocket exploded during a static-fire test on Thursday night, May 28, 2026, causing a massive fireball at Cape Canaveral Space Force Station, Florida.
  • The explosion resulted in significant damage to Blue Origin's primary launch site, LC-36A, which represents years and hundreds of millions of dollars in investment.
  • Blue Origin currently has no other operational launch site for New Glenn; preliminary work on LC-36B and a Vandenberg site are in very early stages.
  • Rebuilding the damaged pad or completing a new one is estimated to take at least a year, possibly 15 months in a "best case" scenario.
  • The failure impacts NASA's Artemis program, particularly the Moon Base I mission, for which Blue Origin was awarded $280.4 million to deliver two lunar rovers in 2028 using its Blue Moon Mark 1 cargo lander.
  • The Blue Moon Mark 1 lander was designed to launch on a single New Glenn vehicle, and its launch on other rockets like Falcon Heavy presents compatibility issues (e.g., BE-7 engine's liquid hydrogen/oxygen vs. Falcon's kerosene upper stage) and competitive hurdles.
  • This event forces NASA to reconsider Artemis III and IV crewed missions, as a crew-rated Blue Moon lander is unlikely to be ready by 2027 or 2028, increasing NASA's dependence on SpaceX's Starship.
  • The anomaly's origin is suspected to be in the central engine of the BE-4 booster, which could further complicate United Launch Alliance's Vulcan rocket's return to service.
  • Unlike SpaceX's iterative Starship development, New Glenn's first stage was considered a mature design, having performed "nearly flawlessly" in its first three flights, making this failure particularly surprising and disruptive.
Decoder
  • Static-fire test: A test where a rocket engine is ignited while the rocket remains firmly attached to the launch pad, primarily to verify engine performance and ground systems.
  • New Glenn: Blue Origin's heavy-lift orbital launch vehicle, designed to carry satellites and spacecraft to Earth orbit and beyond.
  • Blue Moon Mark 1: Blue Origin's lunar cargo lander, intended to deliver payloads to the Moon's surface as part of NASA's Artemis program.
  • Artemis program: NASA's ongoing human spaceflight program with the goal of returning humans to the Moon and establishing a sustainable lunar presence.
  • BE-4 engine: Blue Origin's liquid oxygen and liquefied natural gas rocket engine, used on both New Glenn and United Launch Alliance's Vulcan rocket.
Original article

Thursday night’s detonation of Blue Origin’s New Glenn rocket during a static-fire test produced a spectacular fireball over Florida, sending shards of the rocket flying far and wide, into the sea and across the coastal scrubland nearby.

With sunrise on Friday teams from Blue Origin, the US Space Force, and NASA will be able to begin more thoroughly assessing the damage to Blue Origin’s facilities and begin picking up pieces of the rocket.

pic.twitter.com/EfYn4QWW9M

— Nick Johnson (@NickJohnson315) May 29, 2026

Metaphorically, the effort to pick up pieces will extend far beyond Blue Origin. This launch failure will be devastating not just for Blue Origin but also NASA and broad segments of the US space industry. Here’s a look at some of the major issues that will stem from the explosion.

No launch pad

There’s a reason why, before the very first launch of the Falcon Heavy rocket in 2018, SpaceX founder Elon Musk defined success as the vehicle clearing the launch pad. “I hope that it makes it far enough away from the pad that it does not cause pad damage,” he said. “I would consider even that a win to be honest.” Musk had similar thoughts about the first Starship launch, saying he would consider anything that did not destroy the launch mount a “win.”

Big rockets produce big explosions. And ground infrastructure is a challenging and underrated component of a rocket launch.

Multiple sources have confirmed that there is significant damage to Blue Origin’s launch site in Florida, LC-36A. The company invested years and at least hundreds of millions of dollars in this facility. The scale of the massive lightning towers is difficult to comprehend unless one has climbed one of them.

The company does not have another launch site for New Glenn. It has begun preliminary work on a nearby pad, LC-36B, and has plans to develop another site at Vandenberg Space Force Base in California. But these projects are just getting started.

Rebuilding the company’s pad, or finishing a new one, will likely take at least a year, even with a major effort by Blue Origin, and drawing upon Jeff Bezos’ nearly infinite resources. One source familiar with pad rebuilds estimated that 15 months was a “best case” scenario.

A maturing design

You might wonder what the big deal is. SpaceX has been blowing up Starship rockets left and right, and the space nerds seem to be cheering them on.

The reality is that Blue Origin took a more traditional design route with New Glenn, as opposed to SpaceX’s iterative design, which seeks to test, fly, fail, and fix hardware. The New Glenn first stage had performed nearly flawlessly during its first three flights. It is a mature design.

Because of this, Blue Origin had reached the point where it was poised to begin near-monthly launches of the vehicle during the second half of the year, serving a variety of customers, from NASA to Amazon, AST SpaceMobile, and its own internal payloads.

With the Vulcan rocket also currently offline due to an anomaly, it once again places all of the US medium- and heavy-lift launch capacity in SpaceX’s basket, with its Falcon 9 and Falcon Heavy rockets.

Speaking of Vulcan, if this is a problem with the BE-4 engine—and early indications are that the anomaly leading to Thursday night’s failure originated in the central engine of the booster—it would further compound United Launch Alliance’s difficulties in getting the large rocket back into service.

Blue Moon Mark 1

Blue Origin’s cargo lander has emerged as the supreme workhorse of the early stages of NASA’s Artemis program and Moon Base. It has a capacity to deliver up to 3 tons to the lunar surface and would serve as a pathfinder for a larger version of a lander to take humans to the Moon.

This week, NASA announced that its Moon Base I mission would fly on Blue Moon Mark 1, and it awarded Blue Origin $280.4 million to deliver two lunar rovers in 2028. Multiple other missions are planned on the lander, which was designed to be sent to the Moon on a single New Glenn vehicle.

Could Blue Moon Mark 1 launch on other rockets? SpaceX’s Falcon Heavy and United Launch Alliance’s Vulcan vehicles both likely have the lift capacity to push the vehicle to the Moon. But Vulcan is also sidelined at present and has a long line of Space Force payloads in the queue. So what of Falcon Heavy?

The Mark 1 lander is powered by the BE-7 engine, which runs on liquid hydrogen and liquid oxygen. There may be compatibility issues related to the Falcon rocket’s kerosene-powered upper stage, although this has not been confirmed. Also, it is unlikely that Blue Origin would partner with a direct rival, SpaceX, in this manner.

Artemis program

Due to the Mark 1 issues outlined above, there will either be significant delays to, or the need to restructure the early phases of, the Moon Base program. The lunar rovers under development by Astrolab and Lunar Outpost, for example, have a mass of about 1 ton. Only Mark 1 and SpaceX’s Starship have that kind of delivery capacity.

There are also major implications for the main Artemis crewed missions.

NASA recently changed Artemis III to become a mission that will see the Orion spacecraft rendezvous with one or both of the Human Landing Systems under development by Blue Origin (Blue Moon) and SpaceX (Starship) in low-Earth orbit. NASA appears determined to launch this mission in 2027 and plans to announce its four crew members in a couple of weeks.

But it’s now all but certain that a Blue Moon lander will not be ready for such a mission within the next 18 months. NASA will need to decide whether to wait on Blue Origin or press ahead solely with a Starship mission.

As for Artemis IV, the lunar landing mission, this failure further complicates that plan. It is difficult to imagine a scenario in which a crew-rated Blue Moon lander is ready at any point in 2028 now. Even if the hardware is far along, Blue Origin still needs to fly test missions with Blue Moon Mark 1, which are on hold indefinitely.

A number of senior NASA officials had come to view Blue Origin’s plan to use a slimmed down version of the Mark 2 lander, which would not require in-space refueling, as the prime option for Artemis IV. Now, like much of the US space industry, NASA finds itself highly dependent on SpaceX’s ability to deliver with Starship.

Note: This article has been edited to clarify interoperability issues between the Blue Moon Mark 1 lander and the Falcon Heavy rocket.

DEVOURED
Backpressure is all you need

Backpressure is all you need

Tech lucasfcosta.com
By integrating "backpressure" mechanisms like automated tests, types, and review agents into AI coding loops, developers can enable longer, safer unattended sessions and reduce low-quality pull requests.
What: Lucas F. Costa's article introduces "backpressure" as a concept for AI coding agents, where automated checks (linters, tests, benchmarks, review agents) signal upstream to the AI to refine its work before human intervention. This method aims to make AI-driven development safer and more efficient, moving beyond simple autocomplete or unconstrained generation.
Why it matters: This approach offers a practical framework for integrating AI agents more effectively into software development workflows by systematically addressing quality and correctness issues early, transforming AI from a "glorified autocomplete" into a more autonomous yet reliably constrained contributor.
Takeaway: Consider implementing more automated guardrails (e.g., comprehensive test suites, strict type checking, performance benchmarks, AI-powered review agents) in your CI/CD pipelines to create effective "backpressure" for any AI coding agents you integrate.
Deep dive
  • The article proposes "backpressure" as a crucial mechanism for AI coding agents, allowing downstream components (like automated tests or review agents) to signal upstream to the producer (the LLM) that it cannot accept more work until issues are resolved.
  • This approach avoids the extremes of letting LLMs run unattended (risking bugs and unmanageable PR floods) or treating them as mere autocomplete (too slow and human-dependent).
  • Backpressure aims to enable longer unattended sessions that are safe enough to be useful without fully removing humans from the loop, reducing low-quality pull requests.
  • Examples of backpressure mechanisms include:
  • Linting, testing, and simple verification scripts: Running these checks in each iteration, not just at the end, forces the model to address issues early.
  • Manual testing with cURL and an actual browser: Teaching the model to run applications locally and perform manual checks (sparingly, usually at the end).
  • Benchmarking: For performance-sensitive applications, running quick sanity checks in iterations and full suites post-iteration, with clear acceptance criteria.
  • Review agents: Most effective, these agents provide feedback on quality issues (readability, complexity, types, tests) in each iteration and a final review of the changeset.
  • Planning phase review: An early review by a sub-agent to ensure the fundamental architectural approach is sound before any code is written.
  • Visual design reviews: For front-end work, using skills to take screenshots and compare them against design specifications.
  • Pull-request monitoring: A skill to monitor PRs for new comments, CI status changes, or merge conflicts for a set period (e.g., 24 hours), and instructing the model to address them.
  • The author packaged this backpressure loop into an installable skill @lucasfcosta/backpressured for Claude, allowing users to customize checks via a BACKPRESSURE.md file.
  • The core maxim is that "any system that relies on a human to catch the machine's mistakes will be limited by the human, not the machine," advocating for automated delegation of correctness and quality.
Decoder
  • Backpressure (systems engineering): A mechanism where a downstream component (consumer) signals to an upstream component (producer) that it cannot accept more work, prompting the producer to slow down, buffer, or shed load.
  • LLM (Large Language Model): An artificial intelligence model trained on vast amounts of text data to understand and generate human-like text, often used for coding assistance.
  • CI/CD (Continuous Integration/Continuous Deployment): A set of practices in software development that automates the integration and delivery of code changes, often involving automated tests and deployments.
  • Claude: An AI assistant developed by Anthropic, capable of conversational interaction and various tasks, including code generation and review.
  • Playwright MCP: A tool for browser automation, enabling testing and interaction with web pages in real browsers.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
AI is killing the summer internship. The entry-level pipeline that built careers is breaking

AI is killing the summer internship. The entry-level pipeline that built careers is breaking

Tech The Next Web
Tech internship postings dropped 30% since 2023 as companies replace entry-level tasks with AI, potentially breaking the traditional career pipeline.
What: Tech internship postings are down 30% since 2023, with only 7% of new hires at major tech companies being recent graduates, a decrease from 9.3% in 2023. Companies like Salesforce (which cut support staff from 9,000 to 5,000 using AI agents) and Detroit automakers are replacing tasks like research, data entry, and first-draft writing with AI.
Why it matters: The increasing capability of AI to perform routine tasks previously assigned to interns is fundamentally altering the entry-level hiring pipeline, creating a paradox where AI fluency becomes critical, but the opportunities to gain foundational experience diminish.
Takeaway: If you are an early-career developer, focus on developing strong AI fluency and critical judgment to evaluate AI outputs, as exemplified by McKinsey testing candidates on AI collaboration.
Deep dive
  • Tech internship postings have fallen by 30% since 2023.
  • Only 7% of new hires at major tech companies are now recent graduates, down from 9.3% in 2023.
  • AI tools like ChatGPT are now handling routine tasks such as research, data entry, scheduling, first-draft writing, and basic analysis, which were previously common for interns.
  • This shift is driven by economic logic: AI costs tokens, while interns require time, supervision, and management overhead.
  • Salesforce reduced its support staff from 9,000 to 5,000 after implementing AI agents.
  • Detroit automakers eliminated 20,000 white-collar jobs while simultaneously posting AI-related roles.
  • Companies now expect interns to have AI fluency, with firms like McKinsey testing candidates on their ability to collaborate with AI assistants like Lilli.
  • AWS CEO Matt Garman argues against replacing juniors with AI, noting that junior employees are often the most proficient AI users (55.5% of early-career developers use AI daily, according to the 2025 Stack Overflow survey).
  • However, a concern, dubbed the "Editor Problem," is that AI fluency without domain experience can lead to workers who generate content but lack the judgment to identify errors.
  • The AI job market is booming at the senior level, with "Forward deployed engineer" postings up 19x year-on-year and Chief AI Officers earning nearly $500,000.
  • Some companies, like Accenture, are shifting towards apprenticeships (20% of its entry-level hiring) and skill-based hiring over traditional internships.
Decoder
  • Editor Problem: A concept describing the challenge for new workers who are proficient at generating content using AI tools but lack the foundational domain knowledge and judgment to critically evaluate and correct AI-produced output.
Original article

TL;DR

Tech internship postings fell 30% since 2023. AI now handles the tasks companies used to give interns. The entry-level pipeline is breaking.

Katelyn Watterson owes her career to a summer internship. As a student at American University, she spent a summer working for a high-end beauty brand in New York. Her boss offered her a full-time job over drinks at the Plaza Hotel.

Almost two decades later, Watterson runs her own marketing agency, Fifty Six. At times, she managed as many as eight interns. She enjoyed mentoring them and opening doors for the next generation.

Then AI arrived. The hours she spent tracking down unfinished work and teaching college students professional basics started to add up. Meanwhile, AI could do more and more of the tasks she delegated to interns, and faster.

The data confirms it. A Drexel University annual survey shows that the number of companies scaling back internship programmes is growing. The number expanding them is shrinking. Tech internship postings have dropped 30% since 2023.

Only 7% of new hires at major tech companies are now recent graduates, down from 9.3% in 2023. Internships have declined 11% year on year. The traditional pipeline, where students perform routine tasks in exchange for experience and a shot at a full-time offer, is breaking because AI handles the routine tasks.

The economic logic is straightforward. An intern costs time, supervision, and management overhead. AI costs tokens. When the tasks are structured, repetitive, and low-stakes, the cost comparison is not close. Research, data entry, scheduling, first-draft writing, and basic analysis were the bread and butter of internship programmes. They are now the bread and butter of ChatGPT.

Salesforce cut its support staff from 9,000 to 5,000 after deploying AI agents. Detroit’s automakers eliminated 20,000 white-collar jobs while posting AI roles. The pattern at the top of the corporate ladder, replacing humans with AI for structured tasks, is now reaching the bottom rung.

The paradox is that AI simultaneously makes internships less necessary and more valuable. Companies need fewer interns to handle busywork. But the interns who do get hired are expected to arrive with AI fluency that previous generations never needed.

McKinsey now tests candidates on their ability to collaborate with its AI assistant Lilli. The firm has 25,000 AI agents supporting 60,000 employees. It launched a free AI practice tool so candidates can prepare for a hiring process that evaluates how they work with machines, not just how they think alone.

AWS CEO Matt Garman has argued that replacing juniors with AI is “one of the dumbest ideas” a company can have. His rationale is that junior employees are often the most proficient AI users, having adapted to the tools during their education. The 2025 Stack Overflow Developer Survey found that 55.5% of early-career developers use AI tools daily, a higher rate than their senior counterparts.

The counterargument is that AI fluency without domain experience produces workers who can prompt well but cannot evaluate the output. The “Editor Problem,” as researchers have called it, describes a generation that can generate content with AI but lacks the judgment to know when the content is wrong. That judgment historically came from internships.

The AI job market is booming at the senior level. Forward deployed engineer postings are up 19x year on year. Claude Evangelists earn $240,000. Chief AI Officers command nearly $500,000. The jobs AI creates pay more and require more experience than the entry-level positions it eliminates.

Some companies are pivoting to apprenticeships as an alternative to internships. Accenture now fills 20% of its entry-level hiring through apprenticeships. IBM and Microsoft have scaled programmes that prioritise skills verification over degree pedigree. The apprenticeship model offers longer, more structured training than a summer internship, but it also requires more corporate investment.

The deeper question is what happens to the career pipeline when the first rung disappears. Watterson built a career in marketing because someone gave her a summer job. If that job now goes to an AI tool, the next Watterson does not get the Plaza Hotel moment. She gets a rejection email from an automated screening system that was trained on resumes from people who had internships.

The entry-level pipeline that built millions of careers is not collapsing overnight. It is being squeezed from both sides: fewer positions available and higher expectations for the candidates who fill them. AI is both the cause and the qualification. The tool that replaced the intern is now the skill the intern needs to have.

Get the TNW newsletter

Get the most important tech news in your inbox each week.

DEVOURED
The Website Specification (Website)

The Website Specification (Website)

Tech The Website Specification
The Website Specification provides a platform-agnostic, human and agent-readable checklist of 128 technical features every modern website should implement, from HTML basics to AI readiness.
What: The Website Specification is a new platform-agnostic standard that outlines 128 technical features for decent websites across ten areas including Foundations, SEO, Accessibility (WCAG-aligned), Security, Performance (Core Web Vitals), Privacy, and Agent Readiness (e.g., `llms.txt`). It links back to official sources like WHATWG, W3C, and IETF RFCs, and provides an open MCP server for AI agents.
Why it matters: This initiative formalizes best practices and emerging requirements for web development, highlighting the growing importance of AI agent readability (`llms.txt`) as a core component of web design alongside traditional concerns like accessibility and performance.
Takeaway: Review the Website Specification at `specification.website` to audit your existing projects and ensure compliance with modern web standards, especially for agent readiness and accessibility.
Deep dive
  • The Website Specification is a new, platform-agnostic standard detailing 128 essential technical features for websites.
  • It categorizes these features into ten areas: Foundations, SEO, Accessibility, Security, Well-Known URIs, Agent Readiness, Performance, Privacy, Resilience, and Internationalisation.
  • Key components include title tags, .well-known/security.txt, WCAG contrast standards, Core Web Vitals, and the new llms.txt for AI agents.
  • Each topic links directly to its source standard (WHATWG, W3C, IETF RFCs, WCAG, MDN).
  • It is designed to be readable by both humans and AI agents.
  • The entire specification is available via an open MCP (Machine Comprehensible Protocol) server and as an Agent Skill for compatible AI agents.
  • Markdown versions of individual pages are accessible via /llms.txt or Accept: text/markdown headers.
  • The project is open-source and encourages contributions via GitHub.
Decoder
  • WCAG (Web Content Accessibility Guidelines): A set of internationally recognized guidelines for making web content more accessible to people with disabilities.
  • Core Web Vitals: Metrics defined by Google that measure user experience aspects like loading performance, interactivity, and visual stability of a webpage.
  • IETF RFCs (Request for Comments): Publications from the Internet Engineering Task Force that describe methods, behaviors, research, or innovations applicable to the working of the Internet.
  • WHATWG (Web Hypertext Application Technology Working Group): A community of browser vendors and other interested parties focusing on the evolution of web technologies, notably maintaining the HTML and DOM standards.
  • MCP (Machine Comprehensible Protocol): A proposed open protocol for AI agents to interact with structured data and services, designed to improve the interoperability and capabilities of autonomous agents.
  • llms.txt: A proposed standard similar to robots.txt, intended to provide instructions and information for Large Language Models (LLMs) and AI agents interacting with a website.
Original article

What a good website does.

A platform-agnostic specification of the technical features every decent website should have — from <title> to /.well-known/security.txt, from WCAG contrast to llms.txt. Written for humans and agents.

Categories

Ten areas, mapped to widely-accepted standards.

  • Foundations

    The HTML, head, and document basics every page needs.

  • SEO

    Search visibility — robots.txt, sitemaps, canonicals, structured data.

  • Accessibility

    WCAG-aligned rules so people of all abilities can use the site.

  • Security

    Headers, transport, and policies that keep visitors safe.

  • Well-Known URIs

    Standard, agreed-upon paths under /.well-known/.

  • Agent Readiness

    Things that make a site legible to AI agents and crawlers.

  • Performance

    Core Web Vitals, caching, images, fonts, network behaviour.

  • Privacy

    Consent, signals, and respecting visitor choice.

  • Resilience

    Graceful failure — error pages, offline, redirects.

  • Internationalisation

    Language, locale, direction, and translated content.

Standards, not opinions

Each topic links back to the source standard — WHATWG, W3C, IETF RFCs, WCAG, MDN, and the organisations defining the modern web.

Platform agnostic

Whether you ship WordPress, Drupal, TYPO3, Next.js, Astro, Hugo, a Django app, or plain HTML, the spec is the spec. Implementation hints follow it, not the other way round.

Built in the open

Every page has an Edit on GitHub link. PRs welcome. Sources credited on every page.

Let your agent query the spec.

The whole spec is available as an open MCP server — read-only, no auth — plus a published Agent Skill that teaches any compatible agent when and how to use it. Per-page Markdown is available via /llms.txt and Accept: text/markdown on any spec URL.

{
  "mcpServers": {
    "specification-website": {
      "transport": "http",
      "url": "https://mcp.specification.website/mcp"
    }
  }
}

How to use this site

  1. Audit

    Run through the checklist. Each item is a “does the site do this — yes or no.”

  2. Learn

    Click into any item for what it is, why it matters, and how to implement it.

  3. Improve

    Found a gap, a stale fact, or a missing topic? Open a PR. Sources required.

DEVOURED
NixOS 26.05 released

NixOS 26.05 released

DevOps NixOS
NixOS 26.05 "Yarara" is released with over 20,000 new packages and updates, defaulting to systemd-based stage 1, and ending x86_64-darwin support after this version due to Apple's deprecation.
What: The NixOS 26.05 "Yarara" release, managed by yayayayaka and jopejoe1, includes a Nixpkgs refresh with 20,442 new packages, 20,641 updates, 85 new NixOS modules, and systemd-based stage 1 by default. It also updates GNOME to version 50 and GCC to 15.
Why it matters: The deprecation of x86_64-darwin support highlights the challenges open-source projects face in maintaining compatibility with platforms undergoing significant changes and reduced maintainer capacity.
Takeaway: If you are using Nixpkgs on x86_64-darwin, plan to migrate to an alternative platform or strategy, as support will cease after this 26.05 release goes out of support at the end of 2026.
Deep dive
  • NixOS 26.05 "Yarara" is the latest release, supported for seven months until December 31, 2026.
  • The previous release, 25.11 "Xantusia", is now deprecated and reaches EOL on June 30, 2026.
  • The Nixpkgs repository added 20,442 new packages, updated 20,641, and removed 17,532 outdated ones.
  • NixOS itself gained 85 new modules and 1,547 configuration options, while removing 25 modules and 355 options.
  • Stage 1 (initrd) now uses systemd by default; the old scripted implementation is deprecated and scheduled for removal in 26.11.
  • This will be the last Nixpkgs release to support x86_64-darwin, with binaries maintained until the end of 2026.
  • For 26.11, x86_64-darwin build support will be dropped due to Apple's platform deprecation and limited build/developer resources.
  • GNOME has been updated to version 50 "Tokyo".
  • GCC has been updated to version 15, while LLVM remains at version 21.
  • The release involved 2,842 contributors and 59,703 commits.
Decoder
  • NixOS: A Linux distribution built on the Nix package manager, known for its declarative configuration and atomic upgrades/rollbacks.
  • Nixpkgs: A large collection of packages for the Nix package manager, usable on NixOS, other Linux systems, and macOS.
  • systemd stage 1 (initrd): The initial ramdisk (initrd) phase of the boot process, responsible for setting up the basic system before the main root filesystem is mounted. Systemd is an init system that can manage this stage.
  • x86_64-darwin: The architecture for Intel-based macOS systems.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
Hardening OpenClaw on AKS: Mitigating Container Escapes with Kata microVM Isolation

Hardening OpenClaw on AKS: Mitigating Container Escapes with Kata microVM Isolation

DevOps Microsoft Tech Community
OpenClaw's extensive system access makes it highly vulnerable to container escapes and host takeover via untrusted AI skills or prompt injection when deployed in standard Kubernetes containers.
What: Microsoft's Tech Community blog highlights that OpenClaw, an AI agent system, poses significant security risks in a standard Azure Kubernetes Service (AKS) deployment due to its broad system access. Untrusted AI skills or prompt injection attacks could exploit shared-kernel container isolation, leading to container escapes, host compromise, and lateral movement within the cluster.
Why it matters: This article underscores the critical security challenges introduced by AI agents with broad system access, especially when combined with traditional container isolation models. It emphasizes the need for robust isolation techniques like microVMs to contain potential AI-driven threats.
Takeaway: If deploying AI agents with extensive system access like OpenClaw in Kubernetes, evaluate enhanced isolation solutions such as Kata Containers or similar microVM technologies to mitigate container escape risks.
Deep dive
  • OpenClaw, an AI agent, possesses a high-risk security model due to its broad access to system resources.
  • Its reliance on untrusted "skills" or prompt input creates attack vectors, potentially leading to full system compromise.
  • Standard container deployments, particularly in Azure Kubernetes Service (AKS), rely on shared-kernel isolation.
  • This shared-kernel model makes containers vulnerable to escape, allowing an attacker to access the host system.
  • Threats include kernel exploits, misconfigurations, and exposed privileged interfaces within the container.
  • Container escapes can lead to host takeover and lateral movement across the Kubernetes cluster.
  • The article focuses on mitigating these risks using Kata Containers for microVM isolation.
  • Kata microVMs provide stronger isolation by giving each container its own lightweight virtual machine and kernel.
  • This prevents containerized workloads from directly interacting with the host kernel, significantly reducing the attack surface for escape attempts.
Decoder
  • OpenClaw: An AI agent system mentioned in the context of having broad system access, implying potential security risks.
  • Container escape: A security vulnerability where an attacker breaks out of an isolated container environment and gains access to the host operating system or other containers.
  • AKS (Azure Kubernetes Service): A managed Kubernetes service provided by Microsoft Azure for deploying and managing containerized applications.
  • Shared-kernel isolation: The default isolation model for Linux containers (like Docker or containerd), where multiple containers share the host operating system's kernel.
  • Prompt injection: A type of attack against large language models (LLMs) where malicious input is crafted to manipulate the model's behavior or extract sensitive information.
  • Kata Containers: An open-source project that provides lightweight virtual machines (microVMs) that feel and perform like containers, but offer stronger isolation than traditional containers by giving each a dedicated kernel.
Original article

OpenClaw's broad system access creates a high-risk security model where untrusted skills or prompt injection can lead to full system compromise. When deployed in standard containers, its reliance on shared-kernel isolation introduces container escape risks, making host takeover and lateral movement possible through kernel exploits, misconfigurations, or exposed privileged interfaces.

DEVOURED
Global S3: Another C2 Channel for AgentCore Code Interpreters

Global S3: Another C2 Channel for AgentCore Code Interpreters

DevOps Sonrai Security
AgentCore code interpreter sandboxes can be exploited via S3 as a bidirectional command and control channel using buckets and presigned URLs, despite prior DNS exfiltration fixes.
What: Sonrai Security research demonstrates that AgentCore's code interpreter, even after DNS exfiltration mitigations, remains vulnerable to S3-based command and control (C2). Attackers can leverage S3 buckets and presigned URLs to establish a reverse shell within the sandbox, using the cloud storage service for bidirectional communication.
Why it matters: This reveals a persistent and nuanced challenge in securing AI agent sandboxes, where seemingly innocuous features like cloud storage access can be repurposed for sophisticated C2 channels, highlighting the need for deeper policy enforcement beyond network-level restrictions.
Takeaway: If you manage environments with AI code interpreters that have S3 access, implement strict VPC mode configurations and granular S3 gateway endpoint policies to prevent their use as covert C2 channels.
Deep dive
  • Sonrai Security research identified a new command and control (C2) channel vulnerability in AgentCore code interpreter sandboxes.
  • The vulnerability leverages S3 access, which can be abused for bidirectional communication.
  • This bypasses previous mitigations for DNS exfiltration in code interpreters.
  • Attackers can create S3 buckets and use presigned URLs to facilitate a reverse shell within the sandbox environment.
  • The S3 channel allows both sending commands to the compromised interpreter and receiving output from it.
  • This poses a significant risk for data exfiltration and further compromise of cloud resources.
  • Mitigations include deploying the code interpreter in a Virtual Private Cloud (VPC) with restricted egress.
  • Strict S3 gateway endpoint policies are also recommended to limit access only to necessary S3 resources.
  • The research highlights the sophisticated methods attackers use to circumvent sandbox protections in AI environments.
Decoder
  • AgentCore: An AI system that includes a code interpreter, likely running in a sandbox environment, which is the target of the described vulnerability.
  • Sandbox: An isolated computing environment where programs can be run without affecting the surrounding system, typically used for untrusted code or security testing.
  • S3 (Amazon Simple Storage Service): A widely used object storage service provided by Amazon Web Services (AWS).
  • Command and Control (C2) channel: A covert communication pathway used by attackers to remotely control compromised systems and exfiltrate data.
  • Presigned URL: A URL generated by an AWS account that grants temporary, limited-time access to a specific S3 object without requiring AWS credentials.
  • Reverse shell: A shell session initiated from a target machine back to an attacker's machine, often used for remote control and command execution.
  • DNS exfiltration: A technique where attackers use DNS queries to transmit small amounts of data out of a restricted network.
  • VPC (Virtual Private Cloud): A private, isolated section of a cloud provider's network where users can launch AWS resources in a virtual network they define.
  • S3 gateway endpoint: A gateway that allows private access from a VPC to S3 without requiring an internet gateway, VPN connection, or AWS Direct Connect.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
CI/CD security: threat modeling using a MITRE-style threat matrix

CI/CD security: threat modeling using a MITRE-style threat matrix

DevOps Datadog
CI/CD systems, from SCM to deployment, present a broad attack surface where misconfigurations or compromised credentials can let attackers modify pipelines, access secrets, and exfiltrate data, as detailed in a new MITRE-style threat matrix.
What: Datadog introduced a MITRE ATT&amp;CK-style threat matrix specifically for CI/CD systems, covering SCM, CI, and CD. It outlines attack paths where adversaries can exploit vulnerabilities like overly permissive SCM access or third-party integrations to inject malicious code, exfiltrate data, or deploy cryptomining workloads.
Why it matters: As software supply chain attacks become more prevalent, developers need a structured approach to understand and mitigate risks within their automated delivery pipelines, moving beyond general security frameworks to CI/CD-specific threat intelligence.
Takeaway: Review your organization's CI/CD configurations, especially SCM access policies and third-party integrations, using a structured threat modeling approach to identify potential attack vectors.
Deep dive
  • CI/CD security involves integrating security practices into the pipeline to prevent, detect, and respond to attacks targeting trust boundaries.
  • The CI/CD trust boundary encompasses Source Code Management (SCM) tools (e.g., GitHub), Continuous Integration (CI) tools (e.g., Jenkins, GitHub Actions), and Continuous Deployment (CD) tools (e.g., AWS CodeDeploy).
  • Modern CI/CD systems often define pipelines using configuration files stored in SCM, making SCM a critical entry point for attackers.
  • Attackers can gain access through compromised developer credentials or vulnerable third-party integrations, leading to supply chain attacks.
  • Datadog compiled a CI/CD-specific threat matrix, inspired by MITRE ATT&CK, that categorizes adversarial tactics like Reconnaissance, Initial Access, Execution, Persistence, Credential Access, Exfiltration, and Impact.
  • An example attack path includes scanning public repos, exploiting vulnerable permissions to execute code via a pull request, modifying pipeline config, reading sensitive environment variables (e.g., GitHub token, AWS keys), exfiltrating data, and then deploying cryptomining.
  • Threat modeling involves understanding the system, potential threats, and how the system responds, helping identify weak trust boundaries and security gaps.
  • A simplified detection-based threat model involves identifying inputs/personas/infrastructure, assessing risks, mapping attack paths using the matrix, identifying log sources, and ideating detection workflows.
Decoder
  • MITRE ATT&CK framework: A globally-accessible knowledge base of adversary tactics and techniques based on real-world observations, used as a foundation for the development of specific threat models and methodologies.
  • SCM (Source Code Management): Systems for managing changes to source code over time, such as Git, GitHub, GitLab, and Bitbucket.
  • CI/CD (Continuous Integration/Continuous Delivery): A methodology and set of practices that automate the stages of software delivery, from code integration to deployment.
  • Threat modeling: A structured process for identifying potential threats, vulnerabilities, and attack vectors in a system or application, and then defining countermeasures to prevent or mitigate them.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
Enabling Evolutionary Database Development: database branching with Lakebase

Enabling Evolutionary Database Development: database branching with Lakebase

DevOps Databricks
Databricks' Lakebase introduced copy-on-write database branching, enabling developers to create isolated, production-scale database copies in one second with zero initial storage cost, finally making "every developer gets their own database" a reality after 20 years.
What: Databricks has launched copy-on-write database branching in its Lakebase product for 2026, allowing developers to create a full production-scale database branch in one second with zero initial storage cost. This solves the long-standing problem of providing isolated database instances for local development and CI/CD testing, a core principle of evolutionary database design.
Why it matters: This feature fundamentally changes database development by removing the bottleneck of shared development databases or expensive, stale local copies. It enables true continuous integration for database changes, allowing faster feedback, experimentation, and shifting DBAs from gatekeepers to design consultants.
Takeaway: If your team struggles with shared development databases or slow, complex database setup for local testing, explore database branching solutions like Databricks Lakebase for faster, more reliable development cycles.
Deep dive
  • The article highlights a 20-year-old challenge in database development: "Everybody gets their own database instance" (Practice #4 from "Evolutionary Database Design") has been aspirational due to cost and complexity.
  • Databricks Lakebase introduces copy-on-write database branching in 2026 to address this, allowing creation of production-scale database copies in one second with zero initial storage cost (an O(1) operation).
  • This capability eliminates the need for shared development databases, local in-memory substitutes (like H2/SQLite), or stale pg_dump backups, which often lead to slow feedback and unreliable testing.
  • Developers like "Jen" can now create an isolated database branch, apply migrations, run tests against a realistic dataset and schema, and experiment freely without impacting teammates or requiring DBA intervention.
  • The isolation allows developers to "fail faster" and explore multiple design options for database changes, promoting better architectural decisions rather than just picking the first working solution.
  • CI/CD pipelines can also leverage temporary Lakebase branches to run database migrations, application tests, and database-specific validations, providing schema-diff comments on pull requests.
  • The role of DBAs shifts from being gatekeepers reviewing isolated changes to design consultants, offering input earlier in the development cycle regarding data integrity, indexing, and extensibility.
  • This innovation allows application code and database changes to move forward together as two sides of the same task, fostering continuous integration of database changes.
Decoder
  • Copy-on-write (CoW): An optimization strategy where multiple copies of data initially share the same physical storage. When one copy is modified, only the modified blocks are duplicated, reducing storage overhead and speeding up copy operations.
  • Database branching: The ability to create a separate, independent version or copy of a database's schema and data, similar to how code branches work in version control systems like Git.
  • O(1) operation: In computer science, "constant time" complexity, meaning an operation takes the same amount of time regardless of the input size (e.g., branching a terabyte-scale database in one second, as opposed to time scaling with database size).
  • Evolutionary Database Design: A methodology for designing and changing databases incrementally and safely, treating database schemas as code that evolves over time alongside application code.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
SilverTorch: Index as Model — A New Retrieval Paradigm for Recommendation Systems

SilverTorch: Index as Model — A New Retrieval Paradigm for Recommendation Systems

Data engineering.fb.com
Meta's SilverTorch unifies recommendation system retrieval into a single PyTorch model, achieving up to 23.7x higher throughput and 20.9x more cost efficiency on GPUs.
What: Lei Chen and others at Meta introduced SilverTorch, a "Index as Model" paradigm that redesigns traditional microservice-based retrieval systems for feeds and Reels into a unified PyTorch neural network. It achieved 23.7x higher throughput and 20.9x compute cost efficiency in an 80M-item evaluation compared to CPU-based baselines, while improving recommendation quality.
Why it matters: This shift from a microservice mesh to a single integrated neural network addresses limitations in latency, version consistency, and siloed development by enabling co-design and optimization of all retrieval components on GPUs, potentially setting a new standard for large-scale, low-latency recommendation systems.
Takeaway: If you're building large-scale recommendation systems, investigate the "Index as Model" paradigm and consider how unifying retrieval components into a single GPU-optimized model could improve performance and reduce TCO.
Deep dive
  • SilverTorch unifies all retrieval components (user embedding, ANN search, eligibility filtering, neural reranking, multi-task scoring) into a single PyTorch model.
  • It demonstrated 23.7x higher throughput and 20.9x greater compute cost efficiency compared to traditional microservice baselines.
  • The previous microservice architecture suffered from latency due to data movement, version inconsistencies between services, and siloed development environments (ML engineers in PyTorch, infrastructure in C++).
  • The "Index as Model" paradigm means every retrieval component becomes a tensor or operator inside a single PyTorch model, allowing joint optimization.
  • Key innovations include Bloom index filters (replacing inverted indexes) and fused Int8 ANN search, redesigned for GPU-native execution.
  • Bloom filters turn filtering into dense, parallel bit operations suitable for GPUs.
  • Fused Int8 ANN search uses compact Int8 item embeddings, halving memory usage, and a fused GPU kernel to reduce data movement.
  • This allows the system to return significantly more candidates to downstream models, improving recommendation quality.
  • Neural reranking and multi-task scoring become practical within tight latency budgets, enabling richer relevance modeling earlier in the pipeline.
  • Engineering velocity improved dramatically as ML engineers only need to write PyTorch.
  • Scalability relies on maximizing single GPU use, then scaling out with document sharding and TorchRec for sparse embedding tables.
  • Index freshness is maintained via streaming updates to in-memory model tensors between full model publishes, without taking the model offline.
  • The architecture provides a natural integration point for large language models (LLMs) as another module within SilverTorch.
Decoder
  • Index as Model: A paradigm where all components of a retrieval system, including data indexes and filtering logic, are expressed as modules or tensors within a single neural network model.
  • ANN (Approximate Nearest Neighbor) search: Algorithms that quickly find data points that are approximately closest to a given query point, sacrificing some accuracy for speed, especially in high-dimensional spaces.
  • Bloom filter: A space-efficient probabilistic data structure used to test whether an element is a member of a set, with a risk of false positives but no false negatives.
  • Int8 quantization: Reducing the precision of numerical data, in this case, representing 16-bit floating-point numbers as 8-bit integers, to save memory and accelerate computations on compatible hardware like GPUs.
  • RecSys (Recommendation System): Algorithms and systems that suggest relevant items to users, often powering content feeds, product suggestions, and more.
  • User embedding: A vector representation of a user's interests, preferences, and historical interactions, learned by a neural network.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
The Postgres Developer's Guide to Vector Index Tradeoffs

The Postgres Developer's Guide to Vector Index Tradeoffs

Data Tiger Data
This guide helps Postgres developers navigate vector index tradeoffs for millions of vectors, outlining when to use HNSW, IVFFlat, StreamingDiskANN, and hybrid search with BM25.
What: Hien Phan's guide discusses how vector search in Postgres shifts from simple `ORDER BY embedding &lt;=&gt; ...` to an index design problem when dealing with millions of vectors, filters, and recall/latency requirements. It recommends HNSW for in-memory, read-heavy workloads, IVFFlat for memory/write-sensitive scenarios, and pgvectorscale's StreamingDiskANN for disk-bound indexes.
Why it matters: It clarifies that there's no single "best" vector index; the optimal choice depends on specific workload constraints like memory, recall, write volume, and filter selectivity, emphasizing that vector search inside Postgres requires considering the entire database ecosystem.
Takeaway: When implementing vector search in Postgres, benchmark exact search first for small datasets, then move to `pgvector` with HNSW, consider IVFFlat for write-heavy loads, and explore `pgvectorscale` if your index outgrows memory. Integrate BM25 via `pg_textsearch` for hybrid search if retrieval quality is a concern.
Deep dive
  • Exact k-nearest neighbor search provides perfect recall but scales linearly, becoming too expensive for millions of vectors.
  • ANN (Approximate Nearest Neighbor) indexes organize vectors for faster, approximate searches, trading some accuracy for speed and efficiency.
  • Four constraints drive index choice: memory (in-memory vs. disk-aware), recall (accuracy), writes (update frequency), and filters (selectivity of WHERE clauses).
  • HNSW (Hierarchical Navigable Small Worlds): Graph-based, excellent for high recall/throughput when the index fits in memory. Higher memory footprint and write costs. Implemented in pgvector.
  • IVFFlat (Inverted File Flat): Partitioning-based, more memory efficient and lighter on writes than HNSW, but recall is more sensitive to tuning (number of lists and probes). Implemented in pgvector.
  • DiskANN: Graph-based, designed by Microsoft Research for datasets too large to fit in RAM, guiding search with compressed in-memory info while storing full index on SSD. Addressed by pgvectorscale.
  • SPFresh: (Not in Postgres yet) A Microsoft Research concept for high-update workloads at scale, reducing global rebuilds via incremental partition rebalancing.
  • pgvector: Postgres extension providing native vector column type and supporting HNSW and IVFFlat indexes.
  • pgvectorscale: Extension addressing large-scale vector indexes by introducing StreamingDiskANN, keeping compressed representation in memory and full index on disk. Achieved 28x lower p95 latency vs. Pinecone in a vendor benchmark.
  • pg_textsearch: Tiger Data's extension for BM25-based keyword search in Postgres, accounting for term frequency and document length.
  • ParadeDB: A Postgres distribution bundling pg_search (BM25) and pg_analytics for Elasticsearch-style search quality.
  • Hybrid Search: Combines vector similarity (semantic) with keyword-based search (lexical/exact matches) using methods like Reciprocal Rank Fusion (RRF) to improve retrieval quality by merging ranked lists.
  • The article emphasizes benchmarking with actual workload data, as embedding model, dimensionality, filters, and query distribution all affect performance.
Decoder
  • Exact k-nearest neighbor search: A search algorithm that compares a query vector against every other vector in a dataset to find the exact k closest vectors, guaranteeing perfect recall.
  • Approximate Nearest Neighbor (ANN) search: Algorithms that find data points that are approximately closest to a given query point, sacrificing some accuracy for significantly faster search times, especially with large, high-dimensional datasets.
  • HNSW (Hierarchical Navigable Small Worlds): A graph-based ANN indexing algorithm that organizes vectors into a multi-layered graph for efficient approximate nearest neighbor searches.
  • IVFFlat (Inverted File Flat): A partitioning-based ANN indexing algorithm that divides the vector space into clusters and searches only the most relevant clusters to improve search speed and memory efficiency.
  • DiskANN: A graph-based ANN indexing algorithm specifically designed for datasets that are too large to fit entirely in memory, optimizing for disk access patterns.
  • BM25 (Best Match 25): A ranking function used by search engines to estimate the relevance of documents to a given search query, considering term frequency, inverse document frequency, and document length normalization.
  • Reciprocal Rank Fusion (RRF): A method for combining ranked lists from multiple search algorithms (e.g., vector search and keyword search) without needing to normalize or compare raw scores, by summing the reciprocal ranks of items.
  • pgvector: An open-source extension that adds vector data types and ANN indexing capabilities (HNSW, IVFFlat) directly to PostgreSQL.
  • pgvectorscale: A PostgreSQL extension from Tiger Data that provides advanced vector indexing, including a StreamingDiskANN implementation for datasets that exceed available RAM.
  • pg_textsearch: A PostgreSQL extension from Tiger Data that brings BM25-based full-text search directly into Postgres.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
How we built a lab to evaluate data agents

How we built a lab to evaluate data agents

Data Hex.tech
Hex developed Shoebox, an internal "lab bench" for data agent evaluation, and created Shorelane Commerce, a realistic fake business with messy data, to benchmark agents against real-world analytical challenges.
What: Hex created Shoebox for evaluating data agents, comparing "candidate" runs against "production baselines" across various parameters like prompts, models, and memory. They also built Shorelane Commerce, a synthetic B2B2C business founded in 2019 with $129M yearly revenue and six years of messy, realistic data (e.g., lost customer IDs, unmerged acquisitions, renaming channels) to provide a challenging environment for agents.
Why it matters: This initiative highlights the severe limitations of existing public benchmarks for data agents, which often use "demo-shaped" data, and underscores the necessity of building complex, real-world-simulating environments to genuinely assess AI agent performance in enterprise analytics. It shows that effective agent development requires moving beyond simple text-to-SQL tasks.
Deep dive
  • Shoebox: Hex's internal evaluation infrastructure designed as a lab bench for agent observability and evaluation. It supports ad-hoc and scheduled evaluations, pairwise comparisons, and experimental treatments.
  • Pairwise experiments: Shoebox is designed to compare a "candidate" agent run against a "baseline" run, allowing for objective assessment of improvements.
  • Hybrid workflow: Engineers can run candidate evaluations locally and compare them against shared, consistent remote production baselines.
  • Flexible rubrics: Eval sets come with preconfigured rubrics and ground truths, but users can create custom deterministic, LLM-judged, or hybrid rubrics, including run-scoped "hypothesis objective" rubrics.
  • Shorelane Commerce: A synthetic B2B2C office-supplies platform with realistic, messy data designed to mimic real-world data warehouses, featuring data debt, multiple revenue streams, and conflicting data definitions.
  • Realistic data challenges: Shorelane Commerce includes issues like lost customer IDs, unmerged acquired company data, renamed sales channels without backfilling, and multiple plausible "revenue" columns, forcing agents to handle ambiguity and data debt.
  • Context over models: Hex's experience indicates that agent performance is more a function of the rich context stores they access (like workspace guides and semantic models in Shorelane) than just their prompts or underlying models.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
Private analytics via zero-trust aggregation

Private analytics via zero-trust aggregation

Data Google Research
Google introduced a zero-trust private analytics system using secure aggregation and Trusted Execution Environments (TEEs) to ensure only anonymized, population-level insights are visible from on-device AI data.
What: Adrià Gascón and Mariana Raykova from Google Research announced a new private analytics solution combining a novel cryptographic protocol for secure aggregation with TEEs for attestation. This system allows on-device AI models, like those in Android's SafetyCore, to be evaluated for drift, bias, and error rates without exposing individual user data, utilizing a one-shot, single-message submission protocol.
Why it matters: This solution addresses the critical tension between needing to improve AI models with real-world data and protecting user privacy, pushing the boundaries of what's possible for on-device AI in sensitive applications like system safety. It highlights the industry's move towards multi-layered security approaches to compensate for the evolving vulnerabilities in hardware-based isolation.
Takeaway: If you are developing on-device AI or privacy-sensitive data collection systems, investigate multi-layered approaches combining cryptographic secure aggregation with TEEs for stronger privacy guarantees.
Deep dive
  • Google Research's new private analytics system combines a novel cryptographic secure aggregation protocol with Trusted Execution Environments (TEEs).
  • It addresses the challenge of understanding on-device AI model performance (drift, bias, error rates) without compromising individual user privacy.
  • The system operates on a zero-trust principle, aiming to reduce reliance on any single entity for data protection.
  • A key innovation is a "one-shot" cryptographic protocol, allowing client devices to submit data in a single message, overcoming limitations of previous multi-round secure aggregation schemes.
  • This cryptographic layer ensures individual raw data is never exposed or reconstructed on any server, even within TEEs.
  • TEEs provide an additional layer of hardware-backed isolation and attestation, verifying that the aggregation protocol runs as intended.
  • The solution is being applied to Android's SafetyCore, a system service for Android 9+ devices, to evaluate the effectiveness of on-device safety features like classifiers.
  • It allows engineers to measure "true positive" rates and refine model thresholds based on aggregated, anonymized insights, keeping user content on the device.
  • The cryptographic engine uses a lattice-based protocol that aggregates ciphertexts and encryption keys, only decrypting the final aggregated value.
  • The system mitigates TEE vulnerabilities (like SNPeek, TDXray) by adding a cryptographic layer, ensuring data remains protected even if TEEs are compromised.
Decoder
  • Secure aggregation: A cryptographic technique that allows multiple parties to compute a sum or other aggregate function over their private data without revealing individual data points to any party.
  • Trusted Execution Environment (TEE): A secure, isolated area within a processor that ensures code and data loaded inside are protected with respect to confidentiality and integrity, even from privileged software outside the TEE. Examples include Intel TDX and AMD SEV-SNP.
  • Attestation: A process by which a TEE provides cryptographic proof of its identity and the integrity of the software running within it to a remote party, verifying that the expected, untampered code is executing.
  • Zero-trust principle: A security model that requires strict identity verification for every person and device trying to access resources on a network, regardless of whether they are inside or outside the network perimeter.
  • Federated analytics: A machine learning technique that trains algorithms on decentralized edge devices or servers holding local data samples without exchanging them, only exchanging aggregated model updates.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
How Stripe Uses 4 Developer-First UX Principles to Drive Massive Adoption

How Stripe Uses 4 Developer-First UX Principles to Drive Massive Adoption

Design Raw Studio
Stripe achieved $1.9 trillion in 2025 payment volume by prioritizing a developer-first UX centered on clear documentation, fast API integration, a clean UI, and robust error handling.
What: Stripe's success, processing $1.9 trillion in 2025, is attributed to four developer-first UX principles: task-oriented documentation, quick API integration via pre-built flows and libraries, an intuitive dashboard, and strong error handling with idempotent requests. These principles reduce perceived risk for developers.
Why it matters: This analysis provides a blueprint for how SaaS and API-first companies can achieve rapid adoption and scale by designing their product experience around the primary technical user, emphasizing trust and reducing friction at every stage of the developer journey.
Takeaway: If you're building a developer-facing product, focus on creating documentation around common user jobs, enabling fast "first success" moments with quickstarts and pre-built components, ensuring a clear UI, and implementing robust error handling with idempotency.
Deep dive
  • Stripe processed $1.9 trillion in total payment volume in 2025, a 34% increase, due to its developer-first UX approach.
  • Developers are often the initial buyers for payment infrastructure, and Stripe designs for their needs to ensure quick, safe, and easy integration.
  • Principle 1: Clear documentation – Docs are structured around use cases and common jobs (e.g., "accept payments online"), not just comprehensive API references. They aim to shorten the distance between intent and working output.
  • Principle 2: Fast API integration – Stripe enables quick "first success" moments with prebuilt UIs (Checkout Sessions API), hosted Checkout for 75+ payment methods, and official libraries/sample code, reducing upfront commitment.
  • Principle 3: Clean UI – The Stripe Dashboard is designed for operational clarity for both developers and non-technical teams (finance, support) to manage transactions, refunds, and subscriptions without engineering help.
  • Principle 4: Strong error handling – Stripe uses conventional HTTP response codes, documents error codes, logs API requests, and supports idempotent requests to allow safe retries and prevent duplicate operations, which is crucial for payments.
  • The combined effect of these principles is to reduce perceived risk for developers at every stage, from initial evaluation to ongoing operations.
  • This approach is applicable to any product where a technical user is the initial adopter, by designing around their specific needs for clarity, speed, and control.
Decoder
  • Idempotency (in APIs): The property of an operation that, when executed multiple times with the same parameters, produces the same result and side effects as if it were executed only once. This is critical in payment systems to prevent duplicate charges if a request is retried.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
Adobe Express vs. Canva 2026: Why Designers Switch Back

Adobe Express vs. Canva 2026: Why Designers Switch Back

Design WE AND THE COLOR
Professional designers are shifting back to Adobe Express from Canva due to its deep Creative Cloud integration, commercially safe Firefly AI, and new ChatGPT workflow capabilities.
What: Adobe Express has significantly improved, offering native integration with Photoshop and Illustrator, access to 30,000+ Adobe Fonts, 200 million+ Adobe Stock assets, and Firefly AI (now at Image Model 5) with commercial IP indemnification for enterprise clients. A key development is its deep integration with OpenAI's ChatGPT as of December 2025, enabling conversational design workflows. While Canva still boasts 265 million monthly active users and $4 billion in ARR by late 2025, Adobe Express's professional features and ecosystem connectivity are driving consolidation among existing Creative Cloud users.
Why it matters: This shift reveals Adobe's strategy to differentiate Express by focusing on professional workflow continuity and commercial AI safety, rather than directly competing with Canva's mass-market accessibility. It suggests a future where AI tools are evaluated not just on features, but on ecosystem integration, intellectual property protection, and their ability to bridge quick ideation with high-fidelity production.
Takeaway: If you are a professional designer already using Adobe Creative Cloud, consider trying the 30-day free trial of Adobe Express Premium to evaluate its improved integration and AI features, especially if you need commercially safe AI output.
Deep dive
  • Adobe Express, initially Adobe Spark, has evolved significantly to cater to professional designers, addressing previous gaps compared to Canva.
  • Designers are "switching back" by consolidating their workflows within the Adobe ecosystem, using Express for quick designs that seamlessly integrate with Photoshop and Illustrator.
  • Adobe Express saw a 96% QoQ increase in mobile active users and an 86% YoY surge in cumulative creations, with 19% of global Firefly usage coming from Express.
  • Canva remains strong with 265 million monthly active users and $4 billion ARR by end of 2025, but its strengths lie more in accessibility for non-designers.
  • Key advantages of Adobe Express for professionals include native Creative Cloud integration, access to 30,000+ Adobe Fonts, 200 million+ Adobe Stock assets, and Firefly AI.
  • Firefly AI is trained on Adobe Stock and public domain content, offering IP indemnification for enterprise users, a critical factor for commercial client work.
  • A deep integration with OpenAI's ChatGPT, announced December 2025, allows users to perform design tasks directly via conversational prompts, extending Express's reach.
  • The article introduces "Ecosystem Lock-In Index" and "Creative Continuity Score" frameworks to evaluate tools beyond features, emphasizing workflow integrity.
  • Adobe Express Premium costs $9.99/month, often included in Creative Cloud subscriptions, making it an incremental $0 cost for existing Adobe users.
  • Firefly (Image Model 5) offers higher resolution output (2240x1792px, 4K upscale) and multi-model architecture including Google Imagen 3 and OpenAI GPT image generation, a differentiator for professionals.
  • Predictions: Adobe will consolidate the professional segment, Canva will dominate the mass market, ChatGPT integration will be a major growth driver for Express, and commercial AI safety will become a baseline purchasing criterion.
Decoder
  • Ecosystem Lock-In Index (ELI): A framework evaluating how deeply a design tool integrates with a professional's existing workflow across asset portability, tool continuity, and AI coherence.
  • Creative Continuity Score (CCS): A metric measuring how many steps in a typical professional design workflow a platform can handle without requiring an export, format conversion, or tool switch.
  • IP indemnification: A contractual agreement where one party (Adobe) agrees to compensate another (enterprise customer) for potential intellectual property claims or damages related to a product (Firefly-generated content).
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
New screenshots of upcoming Copilot Super App

New screenshots of upcoming Copilot Super App

AI TestingCatalog.com
Microsoft is reportedly set to debut a unified Copilot "super app" at Build 2026, featuring GitHub Copilot, a new "Cowork" tab, and an always-on AI agent named Scout.
What: Microsoft is preparing a unified Copilot app for Build 2026, as revealed by leaked screenshots. This "super app" will integrate GitHub Copilot for coding, a new "Cowork" tab for aggregating data and suggesting prompts, and "Scout," an always-on AI agent with hinted Teams integration.
Why it matters: This signals Microsoft's strategic move to boost Copilot adoption by centralizing its disparate AI tools into a single, cohesive user experience, aligning with a broader industry trend where competitors like OpenAI and Anthropic are also converging on multi-modal, always-on AI agent paradigms.
Original article

Microsoft looks set to use its Build conference on June 2 in San Francisco to lay the groundwork for the unified Copilot super app it has been building under the internal slogan “Delivering one Copilot.”

Freshly surfaced screenshots provide the clearest look yet at the shell. Earlier views showed the Scout always-on agent within an Autopilot section; two new tabs now complete the picture.

The first is a coding surface with the GitHub Copilot mark, closely mapping to the Claude Code panel in the Claude app. It allows users to pick a work tree, points to both remote environments and local repositories, carries a model selector, lists every repo, and adds Routines, a scheduled-task layer built for code. Sitting atop GitHub Copilot and its millions of paying developers, it could be a real upgrade for teams already standardized on GitHub, especially once Microsoft’s own coding model arrives tuned for GitHub Copilot-specific tool use.

ICYMI: Microsoft is preparing upgrades for image and voice models, too.

The second tab, Cowork, pulls from several sources, aggregates the data, and proposes prompts like preparing for the week from a calendar or researching a company, similar to Copilot’s current document and presentation work. The open question is about local files: the screenshot shows it running in Edge via a URL, so whether it reaches the desktop or remains fully remote is unconfirmed. A sidebar with Library and Projects keeps these jobs apart from plain chat, coding, and Autopilot.

The division matters because the company, with Jacob Andreou now leading Copilot after a reshuffle, is trying to boost weak adoption by folding scattered tools into a single home, just as OpenAI and Anthropic converge on the same always-on, multi-mode pattern. Teams integration hints that Scout could run remotely, the nearest Microsoft may get to the chat-app control that made such agents popular. A nod at Build looks probable, though the app itself is aimed at late summer.

DEVOURED
MiniMax M3

MiniMax M3

AI ThreadReaderApp (MiniMax_AI)
MiniMax has released M3, an open-weights model achieving frontier-level performance in coding and agentic tasks, supporting multimodal input and 1 million token context windows.
What: MiniMax's M3 is an open-weights, multimodal model (supporting image and video input) that excels in coding and agentic work, scoring 59.0% on SWE-Bench Pro and 66.0% on Terminal Bench 2.1. It features a new Sparse Attention architecture, allowing context windows of up to 1 million tokens.
Why it matters: The release of an open-weights model with such advanced multimodal capabilities and an extremely long context window pushes the boundaries of what's publicly available, potentially accelerating innovation and accessibility for developers building agentic AI applications.
Takeaway: Developers interested in cutting-edge open-source models for coding or agentic applications should explore MiniMax M3 via MiniMax Code, Token Plan, or API services.
Decoder
  • Open weights model: An AI model where the parameters (weights) are publicly released, allowing anyone to download, run, modify, and fine-tune it.
Original article

Introducing MiniMax M3: The First Open-Weights Model to Combine Three Frontier Capabilities

  • Coding & Agentic Frontier: 59.0% SWE-Bench Pro, 66.0% Terminal Bench 2.1, 34.8% SWE-fficiency, 28.8% KernelBench Hard, 74.2% MCP Atlas
  • MiniMax Sparse Attention scales context to 1M
  • Natively Multimodal from Step Zero

API: platform.minimax.io

Token Plan: platform.minimax.io/subscribe/toke…

🚀New! MiniMax Code: code.minimax.io

Weights & Tech Report in ~10 Days

API Pricing & Promotion

  • 50% off standard usage (≤512K context) during the first 7 days
  • Priority access available through: api@minimax.io
  • Self-serve access for all users coming in the next few days
DEVOURED
Computex 2026 Will Be NVIDIA's Biggest Event Of The Year. Here's What To Expect

Computex 2026 Will Be NVIDIA's Biggest Event Of The Year. Here's What To Expect

AI Wccftech
Nvidia will unveil its N1X laptop chip, featuring 20 ARM cores and an RTX 5070-equivalent GPU, and detail its "Vera Rubin" AI platform for data centers at Computex 2026, while gaming announcements will be minimal.
What: Nvidia is set to announce its N1X laptop APU at Computex 2026, packing 20 ARM cores and 6,144 CUDA cores with unified memory for local LLMs. The company will also elaborate on its "Vera Rubin" AI platform for data centers, signaling a strong focus on Physical and Agentic AI, with less emphasis on gaming products.
Why it matters: Nvidia is clearly pivoting its strategic focus towards AI-driven computing, from powerful edge devices capable of running local LLMs to comprehensive data center platforms, reflecting the surging market demand for AI acceleration across all computing segments.
Takeaway: If you are in the market for a high-performance laptop, expect new Nvidia N1X-powered models from Dell, Lenovo, and ASUS to arrive with strong local AI processing capabilities.
Decoder
  • APU (Accelerated Processing Unit): A microprocessor that combines a central processing unit (CPU) and a graphics processing unit (GPU) on the same die.
  • VRAM (Video Random Access Memory): Dedicated memory used by graphics cards to store image data and other graphics-related information for display.
  • CUDA Cores (Compute Unified Device Architecture Cores): Parallel processing units within Nvidia GPUs designed to handle complex computations more efficiently than traditional CPUs, crucial for AI and deep learning.
  • LPDDR5X: Low-Power Double Data Rate 5X, a type of high-speed, low-power synchronous dynamic random-access memory used in mobile devices and laptops.
  • ROCm (Radeon Open Compute platform): AMD's open-source programming language and development platform for GPU computing, similar to Nvidia's CUDA.
Original article

Although CES 2026 was a massive disappointment for consumers, Computex 2026 looks to inject some much-needed excitement back into the beleaguered tech space.

In what is arguably the biggest consumer hardware launch of the year, Nvidia and ARM have already started teasing their highly anticipated N1X laptop chip, an APU based on the same GB10 chip used in the DGX Spark. Now, as Jensen prepares to take the stage at Computex next week, let's take a look at what Nvidia has planned for the show.

Nvidia's Laptop Chip Finally Launches, Packing 20 CPU Cores With An RTX 5070 Equivalent GPU

Nvidia, Arm, and Microsoft have taken Twitter by storm recently, with a series of cryptic X posts declaring "A new era of PC", accompanied by coordinates pointing to Taipei Music Center. This obviously refers to the much-anticipated N1X laptop APU, packing 20 ARM cores and 6,144 CUDA cores into a single package, all sharing a unified memory pool over a 256-bit LPPDR5X bus.

In theory, this should put N1X ahead of AMD's strongest APU, but as we've seen with Qualcomm's laptop chips, real-world gaming performance is still hit-or-miss on ARM-based CPUs, not to mention the significant memory bandwidth deficit with LPDDR5X. Another important note is that although the GPU has the same core count as a desktop RTX 5070, power consumption will be significantly lower, so expectations should be kept in check.

Obviously, the real draw with N1X will be the ability to allocate massive amounts of VRAM to the GPU from the shared memory pool. This will allow users to run intelligent, 100B+ parameter LLMs locally, just as we've seen with Strix Halo in its 128GB config. Nvidia's advantage here will be more robust, day-one support for various AI applications, as despite AMD's massive leaps with ROCm recently, CUDA remains king for crucial consumer use cases such as image and video generation.

In terms of partners for this launch, Dell, Lenovo, and ASUS have each either accidentally leaked confirmation of N1X models or hinted at such. HP hasn't teased (or leaked) anything yet, but they'll likely have models available too. Prices are still up in the air, but given that Strix Halo laptops with 128 GB of RAM retail for close to $3k nowadays, I'd expect a figure north of that for equivalently spec'd N1X laptops.

Vera Rubin, Nvidia's Complete "AI Factory" Platform, Rolls Out

Nvidia's next-gen platform for datacenter and AI, "Vera Rubin", has already been hashed out in significant detail by Jensen across multiple events. From Rubin GPUs to Vera CPUs, Nvidia is coming for the whole AI stack and has developed an impressively broad portfolio of products to present a cohesive solution for any workload.

However, even though we probably won't be seeing any new hardware launches for AI datacenters at Computex, there's still bound to be plenty of new details shared by Nvidia. Expect to see Jensen dive deeper into the ecosystem and supply chain that enables Vera Rubin, with partnership announcements and availability windows.

Physical & Agentic AI Take Center Stage

Nvidia has been steadily investing in Physical AI over the years, and it looks like the time is ripe for the company to go all in. With recent developments in Agentic AI, we've finally reached the point where independent agents can reason, act, and operate in the real world thanks to Physical AI.

Or at least, that's what Nvidia's pitch will be; myself, I'm not so sure yet. Regardless, you can expect to hear a lot about how Nvidia's Edge AI platforms, such as Jetson Thor, enable real-time Physical and Agentic AI applications in robotics and autonomous machines, alongside partnership announcements and new applications.

That's Cool And All, But What About Gaming?

In light of recent news that Nvidia has rolled financial reporting for their Gaming business into "Edge Computing", it should come as no surprise that gaming will take a back seat at Computex 2026. Hot off the back of the DLSS 5 controversy, I doubt Nvidia will be too eager to share more details about it, unless they've somehow made massive strides to address the issues gamers had with it since GTC. In terms of new hardware launches, the best we're going to get is N1X, since Blackwell's Super refresh has been indefinitely delayed due to the RAM crisis. Perhaps we'll finally see official confirmation that the RTX 3060 has been revived, as has been rumored for the past couple of months, but I wouldn't expect much more than that.

About the author: Rayan is an aspiring Computer Engineer, currently pursuing his undergraduate studies. He built his first computer in the pandemic, and has been hooked on the hobby ever since. He brings a unique blend of academic knowledge and technical know-how to his articles, which include everything from detailed instructional guides to performance comparisons in wccftech hardware section. When not stressing out over finals or writing articles, you can find him reading fantasy books or hitting the gym.

Follow Wccftech on Google to get more of our news coverage in your feeds.

Further Reading

NVIDIA’s Jensen Huang & AMD’s Lisa Su Touch Down in Taipei as Computex Showdown Looms, Showcasing Next-Gen Technologies

AMD Claims Leadership Tokens/$ With Its Ryzen AI Halo Dev Platform, Tackles NVIDIA’s Spark at $3999 & Pays For Itself Within 6-Months

Origin Code Straps An LCD Screen And Liquid Cooling Onto Its Vortex 48 GB DDR5-6200 Kit Ahead Of Computex 2026

Arm Doubles AGI CPU Revenue Forecast to $2 Billion by 2028 as OpenAI, Cerebras, and Hyperscalers Pile Into Agentic AI Orders

DEVOURED
Introducing 1-bit and Ternary Bonsai Image 4B: Image Generation for Local Devices

Introducing 1-bit and Ternary Bonsai Image 4B: Image Generation for Local Devices

AI PrismML
PrismML has released Bonsai Image 4B, a family of 1-bit and ternary image-generation models capable of running high-quality diffusion inference directly on local devices like an iPhone 17 Pro Max.
What: PrismML's Bonsai Image 4B, built on FLUX.2 Klein 4B, offers 1-bit (0.93 GB) and ternary (1.21 GB) variants that reduce the diffusion transformer footprint by 8.3x and 6.4x respectively. This allows high-quality image generation on Apple Silicon iPhones, iPads, and Macs, with the ternary version retaining 95% accuracy while generating a 512x512 image in 9.4 seconds on an iPhone 17 Pro Max.
Why it matters: This represents a significant advance in democratizing high-quality image generation by enabling local inference on consumer hardware, reducing reliance on cloud APIs, cutting costs, improving privacy, and fostering faster, more iterative creative workflows for users.
Takeaway: Developers interested in integrating local image generation into mobile or desktop applications should investigate Bonsai Image 4B, as its open weights and optimized performance for Apple Silicon devices make it a strong candidate for on-device AI.
Decoder
  • 1-bit/Ternary models: Neural networks where the weights are constrained to a very small set of values (e.g., {-1, +1} for 1-bit, or {-1, 0, +1} for ternary) instead of full floating-point numbers, significantly reducing model size and computational cost.
  • Diffusion inference: The process of generating images using diffusion models, which iteratively refine random noise into coherent images based on a text prompt.
  • FP16 (Half-precision floating-point): A numerical format that uses 16 bits to represent floating-point numbers, offering a balance between numerical precision and memory/computational efficiency compared to 32-bit (FP32).
  • Diffusion Transformer: A type of neural network architecture often used in diffusion models to process and transform image data during the generation process.
  • MLX: An open-source machine learning framework optimized for Apple silicon, developed by Apple.
  • GEMM (General Matrix Multiply): A fundamental operation in linear algebra and machine learning, representing matrix multiplication, which is highly optimized for performance.
Original article

Introducing 1-bit and Ternary Bonsai Image 4B: Image Generation for Local Devices

Today we’re releasing Bonsai Image 4B, a family of compact image-generation models designed to run high-quality diffusion inference on local hardware: from laptops to phones.

Bonsai Image 4B comes in two variants:

  • 1-bit Bonsai Image 4B uses binary {−1, +1} transformer weights with an FP16 group-wise scaling factor, giving 1.125 effective bits per weight. It targets maximum compression and is the right fit when memory pressure, bandwidth, and the deployment footprint are the primary constraints.
  • Ternary Bonsai Image 4B uses {−1, 0, +1} transformer weights with an FP16 group-wise scaling factor, giving 1.71 effective bits per weight. The additional zero state gives the model more representational flexibility, improving visual quality and prompt fidelity while remaining extremely compact.

The result is a new deployment regime for image generation: capable outputs, open weights, and practical local inference on devices that were previously out of reach for this class of model. To our knowledge, Bonsai Image 4B is the first image model in its parameter class to run directly on an iPhone.

Built for local generation

Local image generation starts with a hard constraint: the model has to fit within the device’s memory budget.

For a 4B-class image model, the diffusion transformer is the largest part of the model and the part that runs repeatedly during generation. Each denoising step invokes the transformer again, so transformer size directly shapes memory pressure, bandwidth demand, and local inference speed.

Bonsai Image 4B is built from the FLUX.2 Klein 4B. It keeps the architecture intact but changes how the transformer weights are represented. By moving those weights into binary and ternary form, Bonsai reduces the part of the image pipeline that matters most for local deployment.

Model Diffusion Transformer Reduction vs FP16
FLUX.2 Klein 4B 7.75 GB 1.0x
1-bit Bonsai Image 4B 0.93 GB 8.3x
Ternary Bonsai Image 4B 1.21 GB 6.4x
Table I: Diffusion transformer footprint for models.

The binary layers provide roughly a 14x reduction relative to full-precision transformer weights. A small set of precision-sensitive supporting tensors (~5%), called the projection layers, remains in FP16 so the final 1-bit Bonsai Image 4B transformer is 0.93 GB: an 8.3x reduction from the 7.75 GB full-precision FLUX.2 Klein 4B. 

The ternary variant follows the same structure. Its ternary layers provide roughly a 10x reduction and the final Ternary Bonsai Image 4B transformer is 1.21 GB, a 6.4x reduction from the full-precision transformer. It is slightly larger than the 1-bit model, but the additional zero state improves visual quality and prompt fidelity.

Including the compressed text encoder and FP16 VAE, the Apple Silicon deployment payload is 3.42 GB for 1-bit Bonsai Image 4B and 3.88 GB for Ternary Bonsai Image 4B. For comparison, the full precision FLUX.2 Klein 4B requires a deployment payload of 15.97 GB. Since, at runtime, the text encoder is offloaded after prompt encoding, the mean memory usage is smaller than the total payload. When generating a 512x512 image, the mean-active memory is 1.5 GB and 1.96 GB, for the binary and ternary models, compared to 11.74 GB for the original FLUX.2 Klein 4B (a reduction of 7.8x and 6.0x, respectively). For a 1024x1024 image, the mean-active memory is 1.95 GB and 2.38 GB, for the binary and ternary models, compared to 14.39 GB for the original FLUX.2 Klein 4B (a reduction of 7.4x and 6.0x, respectively).

This reduction in memory footprint changes where the model can run. Our deployment stack supports Apple Silicon iPhones, iPads and Macs and CUDA GPUs, using MLX low-bit paths on Apple hardware and Gemlite low-bit GEMM kernels on CUDA. On iPhone 17 Pro Max, the full-precision FLUX.2 Klein 4B pipeline does not fit within the device memory budget, while both Bonsai Image variants run on-device.

Video I: Image generation on Bonsai Studio

In practice, Bonsai Image 4B generates a 512x512 image in 9.4 seconds on an iPhone 17 Pro Max and about 6 seconds on Mac M4 Pro. On Mac M4 Pro, Bonsai Image 4B is up to 5.6x faster than the stock full-precision MFLUX pipeline. 

Benchmarking performance

Compression only matters if the model remains useful. We evaluated Bonsai Image 4B across three complementary benchmarks: GenEval for object composition and attribute binding; HPSv3 human preference and aesthetic quality; DPG-Bench dense prompt following and semantic faithfulness.

Model Diffusion
Transformer
Footprint (GB)
GenEval HPSv3 DPG-Bench Size reduction
relative to
FLUX.2 Klein 4B
Performance
relative to
FLUX.2 Klein 4B
1-bit Bonsai Image 4B 0.93 0.671 11.15 0.822 8.3x 88%
Ternary Bonsai Image 4B 1.21 0.723 12.22 0.851 6.4x 95%
FLUX.2 Klein 4B 7.75 0.819 12.84 0.853 1x 100%
SDXL 5.14 0.3 10.05 0.74 1.5x 67%
BK-SDM-Small 0.98 0.297 3.05 0.559 7.9x 42%
Stable Diffusion 1.5 1.72 0.396 4.2 0.601 4.5x 51%
PixArt-Σ XL 2 1.2 0.541 11.93 0.769 6.4x 83%
Table II: Image quality benchmark comparison across Ternary Bonsai Image 4B and other models.

Ternary Bonsai Image 4B is the quality-oriented variant. At 1.21 GB, it retains 95% of the FLUX.2 Klein 4B accuracy across GenEval, HPSv3, and DPG-Bench, while reducing the diffusion transformer footprint by 6.4x.

1-bit Bonsai Image 4B is the footprint-oriented variant. It brings the diffusion transformer below 1 GB, an 8.3x reduction, while still delivering strong benchmark scores across the same three evaluations (it retains 88% of the accuracy of FLUX.2 Klein 4B).

Together, the two variants move the quality–footprint frontier. Bonsai Image remains competitive with modern 4B-class image models while using a fraction of their diffusion-transformer footprint. At the same time, it substantially outperforms smaller models with similar memory footprints. That is the same Pareto shift we have seen in our prior Bonsai language models. Bonsai Image brings modern diffusion-transformer behavior into a memory range that previously belonged to much smaller, lower-capability models.

Why this is important

Image generation is not only a model-quality problem. It is also a deployment problem.

Cloud APIs will continue to be the right choice for many products. But cloud-only generation imposes certain product constraints: every prompt is a remote request, every iteration carries marginal serving cost, and every interaction adds round-trip latency.

That matters because image generation is naturally iterative. Users rarely stop at one image. They revise prompts, compare outputs, generate variations, discard failures, and try again. When each attempt is a server-side job, the creative loop becomes something users have to meter and wait for. 

Local inference changes that. Once the model fits on the device, generation can sit directly inside the product experience. It becomes cheaper to run, faster to iterate on, and easier to use in environments where prompts, and generated assets should remain private.

Bonsai Image 4B is a step toward that deployment regime: capable image generation running closer to the user, on hardware they already own.

Availability

Both 1-bit and Ternary Bonsai Image 4B will be released with open weights and code under the Apache 2.0 license

With this launch, we are also launching Bonsai Studio, its iOS app for trying Bonsai Image 4B directly on iPhone.

Join Us

PrismML emerged from a team of Caltech researchers and was founded with support from Khosla Ventures, Cerberus and Google. We’ve spent years tackling one of the field’s hardest problems: compressing neural networks without sacrificing their reasoning ability.

If you want to help build the next generation of state-of-the-art AI, we’d love to hear from you. Check out our careers page.

Resources

PrismML emerged from a team of Caltech researchers and was founded with support from Khosla Ventures, Cerberus and Google. We’ve spent years tackling one of the field’s hardest problems: compressing neural networks without sacrificing their reasoning ability.

If you want to help build the next generation of state-of-the-art AI, we’d love to hear from you. Check out our careers page.

Resources

DEVOURED
pi-dynamic-workflows (GitHub Repo)

pi-dynamic-workflows (GitHub Repo)

AI GitHub
A new Pi extension called `pi-dynamic-workflows` allows AI assistants to generate and execute JavaScript scripts for complex tasks by fanning out work across multiple isolated subagents.
What: Michael Li's `pi-dynamic-workflows` is a Pi extension that enables large language models to write JavaScript scripts to orchestrate subagents for tasks like codebase audits and large refactors. It supports parallel execution, pipeline stages, and structured output via JSON Schema.
Why it matters: This tool demonstrates an evolving trend in agentic AI, moving beyond sequential command execution to more sophisticated, code-driven orchestration, enabling greater flexibility and control over complex AI workflows.
Takeaway: If you use Pi, consider installing `pi-dynamic-workflows` (`pi install npm:pi-dynamic-workflows`) to explore more advanced, scriptable agentic workflows for development tasks.
Deep dive
  • pi-dynamic-workflows is a Pi extension inspired by Anthropic's dynamic workflows in Claude Code.
  • It allows the main AI model (Pi) to write a JavaScript script that then orchestrates multiple isolated subagents.
  • Subagents can perform actions like reading files, running shell commands, and returning structured output using JSON Schema.
  • The tool supports agent(), parallel(), and pipeline() functions for different orchestration patterns.
  • phase() calls in the script provide live progress updates during workflow execution.
  • Workflow scripts run in a Node.js VM sandbox with restricted globals (e.g., no Date.now(), Math.random(), require, fs), ensuring determinism and reproducibility.
  • Structured output is handled by passing a JSON Schema to the agent() call, terminating the subagent on schema validation.
  • This is a prototype, currently lacking features like persisted or resumable runs and a workflow manager.
Decoder
  • Pi: An AI assistant or framework, likely focusing on developer tasks, that can be extended with plugins.
  • Subagent: An isolated, in-memory AI session spawned by a main workflow, capable of executing specific tasks independently.
  • JSON Schema: A declarative language for defining the structure of JSON data, used here to ensure subagents return valid structured outputs.
Original article

pi-dynamic-workflows

Claude-Code-style dynamic workflows for Pi.

A Pi extension that adds a workflow tool. Instead of one assistant doing everything sequentially, the model writes a small JavaScript script that fans out the work across many isolated subagents, then synthesizes the results.

Great for codebase audits, multi-perspective review, large refactors, and fan-out research.

Inspired by Anthropic's dynamic workflows in Claude Code.

Install

pi install npm:pi-dynamic-workflows
# or from a local checkout
pi install /path/to/pi-dynamic-workflows

Then in Pi:

/reload

That's it. The extension registers a workflow tool and activates it on session start.

Usage

Just ask Pi for a workflow in plain language:

Run a workflow to inspect this repository and summarize the main modules.

The model will write a workflow script and call the workflow tool. Live progress shows up inline:

◆ Workflow: inspect_project (3/3 done)
  ✓ Scan 1/1
    #1 ✓ repo inventory
  ✓ Analyze 2/2
    #2 ✓ source modules
    #3 ✓ final summary

Press Esc to cancel a running workflow. Active subagents are aborted and surfaced as skipped.

Workflow script shape

A workflow is plain JavaScript. The first statement must export literal metadata. name and description are required; phases is optional documentation for an expected outline. The live progress view is driven by phase(...) calls at runtime:

export const meta = {
  name: 'inspect_project',
  description: 'Inspect a repository and summarize the main modules',
  phases: [
    { title: 'Scan' },
    { title: 'Analyze' },
  ],
}

phase('Scan')
const inventory = await agent('Inspect the repository structure.', {
  label: 'repo inventory',
})

phase('Analyze')
const summary = await agent(
  'Summarize the main modules from this inventory:\n' + inventory,
  { label: 'module summary' },
)

return { inventory, summary }

Phases are discovered as the script runs, so conditional and loop-created phases work naturally. If a branch is skipped, its phase does not show up as an empty progress row.

Editor IntelliSense

Reusable workflow files can opt into editor hints for workflow globals:

/// <reference types="pi-dynamic-workflows/workflow" />

This declares agent, parallel, pipeline, phase, log, args, cwd, and budget for TypeScript-aware editors.

Available globals

Global Description
agent(prompt, opts) Spawn an isolated subagent. Returns its final text or, with opts.schema, a validated object.
parallel(thunks) Run an array of () => agent(...) thunks concurrently. Results are returned in input order.
pipeline(items, ...stages) Run each item through sequential stages while items fan out. Each stage receives (prev, original, index).
phase(title) Mark the current phase. Used for grouping in the live progress view.
log(message) Append a workflow-level log line.
args Optional JSON value passed in via the tool's args parameter.
cwd, process.cwd() Current working directory for subagents.
budget { total, spent(), remaining() } token budget tracker.

Determinism rules

Workflow scripts are evaluated inside a Node vm sandbox. The following are intentionally unavailable:

  • Date.now(), new Date()
  • Math.random()
  • require, import, fs, network APIs
  • spreads, computed keys, template interpolation, function calls inside meta

This keeps meta parseable, runs reproducible, and the surface area small.

Structured subagent output

Pass a JSON Schema via opts.schema and the subagent will return a validated object:

const finding = await agent('Find security-sensitive files.', {
  label: 'security scan',
  schema: {
    type: 'object',
    properties: {
      paths: { type: 'array', items: { type: 'string' } },
      reason: { type: 'string' },
    },
    required: ['paths', 'reason'],
  },
})

Under the hood this is a Pi structured_output tool with terminate: true, so the subagent ends on that call without an extra assistant turn.

How it works

user prompt
  → Pi model writes a workflow script
  → workflow tool parses + runs script in a vm sandbox
  → script calls agent(), parallel(), pipeline()
  → each agent() spawns an in-memory Pi subagent session
  → snapshots stream back as compact progress
  → final structured result returned to the parent assistant

Subagents run in fresh in-memory Pi sessions with the standard coding tools, so they can read files, run shell commands, and call structured output exactly like a normal Pi turn.

Library modules

File Purpose
src/workflow.ts AST-validated parser and sandboxed workflow runtime.
src/workflow-tool.ts The Pi workflow tool, prompt guidelines, rendering, abort handling.
src/agent.ts WorkflowAgent, an in-memory Pi subagent runner.
src/structured-output.ts Terminating structured-output tool backed by TypeBox/JSON Schema.
src/display.ts Workflow snapshots and compact text renderers.
extensions/workflow.ts The Pi extension entrypoint.

Development

npm install
npm test     # biome check + tsc + unit tests
npm run dev

Parser unit tests live in tests/workflow-parser.test.ts and cover both accepted and rejected script shapes.

Status

This is a prototype. It implements the core workflow primitive (script, subagents, parallel/pipeline, phases, abort, structured output) but does not yet implement persisted or resumable runs, or a /workflows manager.

License

MIT

DEVOURED
Grok Build 0.1 on API

Grok Build 0.1 on API

AI xAI
xAI has released Grok Build 0.1 in public beta via its API, specifically designed for agentic coding and debugging tasks, processing over 100 tokens per second.
What: xAI's new model, `grok-build-0.1`, is accessible through the API in public beta, targeting developers with agentic coding tasks like web development and debugging. It boasts a processing speed of over 100 tokens/second and costs $1 per million input tokens and $2 per million output tokens.
Why it matters: The release of a dedicated, high-speed model for agentic coding tasks by xAI indicates a growing specialization in the LLM market, with providers tailoring models for specific, compute-intensive developer workflows.
Takeaway: If you are developing agentic coding tools or workflows, consider evaluating `grok-build-0.1` via the xAI API for its speed and specific task focus.
Original article

xAI's grok-build-0.1 is now in public beta via the API, designed for agentic coding tasks like web development and debugging. The model processes over 100 tokens/second, costing $1 per million tokens in and $2 per million out. It integrates well with platforms like Grok Build, Cursor, and OpenClaw.

DEVOURED
Verifying Agentic Development at Scale

Verifying Agentic Development at Scale

AI X
Cognition's Ido Pesok revealed that Devin now handles more asynchronous, verified-before-merge testing sessions than interactive ones, thanks to running 10-20 Devins in parallel.
What: Ido Pesok from Cognition highlighted that Devin, their AI agent, is increasingly used for autonomous end-to-end testing, with asynchronous sessions now outnumbering interactive ones. This shift was enabled by engineers running multiple Devin instances (10-20) in parallel with dedicated dev servers, a capability added roughly six months ago.
Why it matters: The move towards massively parallel, asynchronous execution for AI agents like Devin demonstrates how scaling infrastructure can unlock entirely new modes of operation for agentic development, making "verified-before-merge" a practical reality rather than an aspirational goal.
Takeaway: If building or integrating AI agents for development tasks, consider how parallel execution and dedicated ephemeral environments could drastically improve throughput and enable automated verification workflows.
Decoder
  • Devin: An AI software engineer, developed by Cognition, designed to autonomously plan and execute complex engineering tasks.
Original article

Cognition's Ido Pesok shares lessons from building autonomous end-to-end testing into Devin, noting that for the first time, more Devin sessions are now triggered asynchronously than interactively, making verified-before-merge results a hard requirement rather than a nicety. Devin's harness gained computer-use tools roughly six months ago, and the breakthrough came when engineers started running 10-20 Devins in parallel, each with its own dev server, something impossible on a single laptop.

DEVOURED
Ex-DeepMind researchers raised $50M to build AI that figures out which scientific questions are worth asking

Ex-DeepMind researchers raised $50M to build AI that figures out which scientific questions are worth asking

AI The Next Web
Former DeepMind and White House AI policy experts launched Inherent with a $50 million seed round to build Faraday, an "AI-native science" platform that determines which scientific questions are worth pursuing.
What: London-based AI lab Inherent emerged from stealth with a $50 million seed round co-led by Index Ventures and Radical Ventures, with participation from NVentures and others. Founded by Tantum Collins, Edward Hughes, and Louis Kirsch (all ex-DeepMind), with Kaloyan Aleksiev (ex-Reka AI, Microsoft), their platform Faraday aims to help human researchers identify valuable scientific questions. Matt Clifford, former UK AI tsar, advises the public benefit corporation.
Why it matters: This signals a new frontier in AI research application, moving beyond task automation to address the fundamental problem of scientific discovery by leveraging AI's ability to explore hypothesis spaces, potentially accelerating breakthroughs in areas humans struggle to prioritize.
Decoder
  • Public benefit corporation (PBC): A type of for-profit corporate entity that includes positive impact on society and the environment in addition to profit as its legally defined goals.
Original article

London AI lab Inherent raised $50M from Index Ventures and Radical Ventures to build self-improving AI for scientific discovery. Ex-UK AI tsar Matt Clifford advises.

London-based AI lab Inherent emerged from stealth on Wednesday with a $50 million seed round co-led by Index Ventures and Radical Ventures. Nvidia’s venture arm NVentures also participated, alongside Ex/Ante, Metaplanet, Macroscopic Ventures, and Mythos Ventures. It is among Europe’s largest AI stealth-to-launch rounds in 2026.

The founding team comes from DeepMind, Microsoft, and Reka AI. Tantum Collins and Edward Hughes previously collaborated on cooperative AI research at DeepMind. Louis Kirsch, another co-founder, also worked at DeepMind. Kaloyan Aleksiev came from Reka AI and Microsoft.

Collins has a policy background that most AI lab founders lack. He worked on AI policy at the Biden White House before co-founding Inherent. Matt Clifford, co-founder of Entrepreneurs First and the UK government’s former AI tsar, has joined as an adviser.

Inherent is building a platform called Faraday, named after the scientist. Its purpose is not to answer questions faster. It is to figure out which questions are worth asking in the first place.

Most AI is built to answer questions. What it can’t do yet is figure out which questions are worth asking, the open-ended curiosity that produced penicillin, the microwave, the GPU,” said Danny Rimer, partner at Index Ventures. “That’s the gap Inherent is building into.

Faraday pairs human researchers with AI agents that are designed to improve themselves iteratively on hard scientific problems. The company describes this as “AI-native science,” a paradigm it says will look and feel different from the scientific method as practised for the past 400 years.

Index Ventures framed the bet in those terms. “AI-native science will be messier, less legible, but capable of exceptional outcomes,” the firm wrote in a blog post announcing the investment. The conviction is that the most valuable application of frontier AI is not automating existing workflows but enabling discoveries that human researchers could not reach alone.

Inherent is structured as a public benefit corporation, a legal form that requires the company to consider its impact on society alongside shareholder returns. The structure is unusual for a venture-backed AI lab. It signals that the founders view governance as a competitive advantage rather than a constraint.

European AI startups are increasingly demonstrating that they can raise at scales previously reserved for Silicon Valley. Inherent’s $50 million seed sits alongside Peec AI’s $10 million ARR in six months, Lovable’s $100 million single-month revenue, and Mistral’s $300 million ARR. The gap between European and American AI funding is narrowing for companies building in categories where the technology is genuinely new.

Anthropic’s Glasswing project demonstrated that frontier AI can find vulnerabilities at a rate that outpaces human remediation. Inherent’s bet is that the same dynamic applies to scientific discovery: AI agents that can explore hypothesis spaces faster than human researchers can, while humans provide the judgment, taste, and ethical guardrails that agents cannot.

The team’s combination of DeepMind research credentials and White House policy experience gives it unusual positioning. It can credibly pitch to both the scientific establishment and the government institutions that fund basic research. Whether Faraday delivers on the promise of AI-native science will take years to evaluate. The $50 million buys the time to find out.

Get the TNW newsletter

Get the most important tech news in your inbox each week.

DEVOURED
OpenAI Robotics is hiring

OpenAI Robotics is hiring

AI Thread Reader App
OpenAI Robotics, evolving from its world simulation research, is aggressively hiring full-stack hardware, operations, systems, and ML engineers to develop robots for societal use, initially focusing on infrastructure support.
What: Sam Altman announced OpenAI Robotics is seeking exceptional full-stack hardware, ops, systems, and ML engineers to program and manufacture useful robots. This initiative, led by Aditya Ramesh, evolved from OpenAI's world simulation research program and aims to enable AI assistance in the physical world, starting with supporting skilled workers for infrastructure.
Why it matters: OpenAI's direct entry into robotics hardware and manufacturing signals a deeper commitment to embodied AI, moving beyond purely software models to integrate AI directly into physical agents capable of interacting with the real world, potentially accelerating both research and practical applications.
Takeaway: Exceptional full-stack hardware, ops, systems, or ML engineers interested in robotics can send their background and accomplishments to robotics-recruiting@openai.com.
Original article

OpenAI Robotics is hiring, looking for exceptional full-stack hardware, ops, systems, and ML engineers to help us program and manufacture robots that are useful for society.

AI should be able to help people in the physical world. In the short term, we are focused on robots to support skilled workers to build our future infrastructure; in the long term, we imagine everyone having a personal robot doing anything they need.

Our world simulation research program, led by Aditya Ramesh (@model_mechanic), has evolved over the past year into OpenAI Robotics. Progress is rapid, and based on a foundation of co-design between robotics hardware and ML research.

If you love working hands-on across the robotics stack and want to build the future, please consider joining us. Send an email with your background and evidence of exceptional accomplishment to: robotics-recruiting@openai.com

• • •

Missing some Tweet in this thread? You can try to force a refresh

More from @sama

Sam Altman

@sama Mar 1 I'd like to answer questions about our work with the DoW and our thinking over the past few days. Please AMA.

@natseckatrina who leads some of our national security work is going to jump in to answer some of your questions

@boazbaraktcs is also going to help out with answers!

Sam Altman

@sama Feb 27 We have raised a $110 billion round of funding from Amazon, NVIDIA, and SoftBank.

We are grateful for the support from our partners, and have a lot of work to do to bring you the tools you deserve.

We are excited to partner with Amazon to bring a new generation of products to market, especially around new enterprise products like the stateful runtime environment. We are also very excited to make great use of Tranium.

We continue to have a great relationship with Microsoft. Our stateless API will remain exclusive to Azure, and we will build out much more capacity with them.

Sam Altman

@sama Aug 7, 2025 going to try live-tweeting the GPT-5 livestream.

first, GPT-5 in an integrated model, meaning no more model switcher and it decides when it needs to think harder or not.

it is very smart, intuitive, and fast.

it is available to everyone, including the free tier, w/reasoning!

evals aren't the most important thing--the most important thing is how useful we think the model will be--but it does well on evals. for example, a new high on SWE-bench and many other metrics.

it is by far our most reliable and factual model ever.

rolling out today for free, plus, pro, and team users. next week to enterprise and edu.

making this available in the free tier is a big deal to us; PhD-level intelligence for everyone!

plus users get much higher rate limits.

pro users get GPT-5 pro; really smart!

Sam Altman

@sama Apr 10, 2025 a lot of people were interested in how we made GPT-4.5 and what comes next.

we did a podcast with alex paino, dan selsam, and @atootoon who helped drive the project.

full episode coming soon, but here are some interesting clips:

Sam Altman

@sama Feb 3, 2025 today we launch deep research, our next agent.

this is like a superpower; experts on demand!

it can go use the internet, do complex research and reasoning, and give you back a report.

it is really good, and can do tasks that would take hours/days and cost hundreds of dollars.

people will post lots of great examples, but here is a fun one:

i am in japan right now and looking for an old NSX. i spent hours searching unsuccessfully for the perfect one. i was about to give up and deep research just...found it.

it is very compute-intensive and slow, but it's the first ai system that can do such a wide variety of complex, valuable tasks.

going live in our pro tier now, with 100 queries per month.

plus, team, and enterprise will come soon, and then free tier.

Sam Altman

@sama Sep 12, 2024 here is o1, a series of our most capable and aligned models yet:

o1 is still flawed, still limited, and it still seems more impressive on first use than it does after you spend more time with it. openai.com/index/learning…

but also, it is the beginning of a new paradigm: AI that can do general-purpose complex reasoning.

o1-preview and o1-mini are available today (ramping over some number of hours) in ChatGPT for plus and team users and our API for tier 5 users.

screenshot of eval results in the tweet above and more in the blog post, but worth especially noting:

a fine-tuned version of o1 scored at the 49th percentile in the IOI under competition conditions! and got gold with 10k submissions per problem.

DEVOURED
OpenAI Outlines Playbook for Trustworthy Third-Party AI Model Evaluations

OpenAI Outlines Playbook for Trustworthy Third-Party AI Model Evaluations

AI OpenAI
OpenAI released a comprehensive guide on May 28 for conducting trustworthy third-party evaluations of frontier AI models, emphasizing transparency and robust methodology.
What: OpenAI published a detailed "Foundations for Trustworthy Third-Party Evaluations of Frontier AI Models" playbook on May 28. This guide provides a framework for external organizations to assess advanced AI models like GPT-5.5, covering aspects from methodology design to reporting, to ensure security, safety, and ethical compliance.
Why it matters: As frontier AI models become more powerful and widely deployed, establishing clear, standardized, and verifiable evaluation protocols by independent third parties is crucial for building public trust, enabling responsible development, and navigating future regulatory landscapes.
Takeaway: AI model developers or researchers involved in AI safety should review OpenAI's new playbook to understand proposed best practices for external evaluations and potentially adopt them.
Decoder
  • Frontier AI Models: Refers to the most advanced and powerful AI models currently available or under development, characterized by their large scale, sophisticated capabilities, and potential for broad societal impact.
Original article

OpenAI published a comprehensive guide on May 28 for conducting trustworthy third-party evaluations of frontier AI models like GPT-5.5.

DEVOURED
Leaks: Nvidia-Powered Windows 11 PCs Set to Debut

Leaks: Nvidia-Powered Windows 11 PCs Set to Debut

Tech Thurrott
Leaks suggest Nvidia is re-entering the Windows on Arm PC market, collaborating with Microsoft to power new AI-capable devices potentially debuting at Computex.
What: New Nvidia N1 and N1x chips are expected to power Windows 11 Arm-based PCs from Dell and Microsoft Surface, with an announcement potentially on Monday at Computex. The N1 chip targets 18-45W with up to 16GB RAM, while the N1x chip targets 45-80W with up to 128GB RAM.
Why it matters: This signals a major shift in Microsoft's Arm strategy, diversifying beyond Qualcomm's Snapdragon X chips and potentially fostering more competition and innovation in the Windows on Arm ecosystem, especially for local AI capabilities.
Takeaway: If you've been waiting for more powerful or diverse Windows on Arm hardware, keep an eye on announcements from Computex and Microsoft Build this week.
Decoder
  • Windows on Arm: A version of the Windows operating system designed to run on ARM-based processors, typically known for better power efficiency than traditional x86 processors.
Original article

Multiple leaks point to a Monday reveal of new Nvidia chipsets that will power Windows 11 on Arm-based PCs this year. Nvidia has allegedly created multiple chipset tiers, and Dell, Microsoft, and other hardware makers will allegedly announce new PCs, all timed for the opening day of the Computex conference in Taiwan.

Rumors about Nvidia’s re-entry into PC chipsets–the firm powered the first Arm-based Surface RT laptops back in 2012–have come and gone for years, with many pointing to a secret Microsoft/Qualcomm exclusivity arrangement that’s never been confirmed as the major reason for the delays. And though the most recent reports from earlier this year were curiously more specific and highly confused, it did seem like a release was imminent this year.

Now we have new leaks. And they indicate that we don’t have long to wait to see what Nvidia has in store for Windows 11 on Arm.

Axios reports that Nvidia will “debut the first Windows [11 on Arm] computers that use its chips as the main processor [since 2012].” It will do so with Microsoft, as the chips were designed in partnership with the software giant, which, to date, has closely aligned itself with Qualcomm and its Snapdragon X family of Arm-based chips for PCs.

Axios expects to see new Nvidia-powered PCs from Microsoft Surface and other PC makers, though only Dell is named explicitly. And Microsoft will make related announcements about AI agents running locally on these (and presumably other) PCs, though it’s not clear if that will happen at Computex, Build (which is also getting underway this coming week), or both.

Separately, the Videocardz hardware enthusiast site provides what it says are details about Nvidia’s new PC chips, which will apparently come in two major variants called N1 and N1x, each with two variants comprised of different CPU and CUDA core counts, and different ranges of RAM (8 to 16 GB for the N1 and 16 to 128 GB for the N1x). The N1 chips apparently run at 18 to 45 watts, which makes sense for the thin and light ultra-portable designs typically used with Snapdragon X chips. But the N1X chips allegedly consume 45 to 80 watts, which makes them more suitable for gaming laptops, portable workstations, or even desktop PCs.

It’s not clear how much we can trust that second report, as it mentions that at least one of the documents this information is based on is two years old. But something is happening, and even Nvidia has gotten in on the fun: On Friday, the company cryptically tweeted, “A new era of PC.” So we should know soon.

Tagged with

DEVOURED
FAA documents outline SpaceX plans for Starfall reentry vehicles

FAA documents outline SpaceX plans for Starfall reentry vehicles

Tech SpaceNews
FAA documents reveal SpaceX's "Starfall" project for uncrewed reentry vehicles, approved for test flights, capable of in-space manufacturing and point-to-point cargo delivery.
What: The FAA approved test flights for SpaceX's uncrewed "Starfall" reentry vehicles on May 15, which are designed for both in-space manufacturing and rapid point-to-point cargo delivery on Earth. These disk-shaped capsules, 0.75m tall and 3.1m in diameter, will launch on Falcon 9 or Starship and return to the Pacific Ocean.
Why it matters: This indicates SpaceX's ambition to create a "mass producible" system for microgravity research and high-speed cargo delivery, potentially competing with existing and emerging space manufacturing and reentry service providers like Varda Space Industries and Inversion.
Deep dive
  • The Federal Aviation Administration (FAA) issued an environmental assessment and approved test flights for SpaceX's "Starfall" uncrewed reentry vehicle on May 15, with public notification on May 29.
  • The documents describe Starfall as a system for both in-space manufacturing and point-to-point cargo delivery, aiming to support a "self-sustaining manufacturing economy in space."
  • SpaceX plans to build these disk-shaped capsules (0.75m tall, 3.1m diameter) in large volumes, capable of carrying up to 1,000 kg of payload.
  • Test flights involve two reentries into the Pacific Ocean, approximately 1,300 km off California and Mexico.
  • The capsules can launch on either Falcon 9 or Starship vehicles, following orbital or suborbital trajectories.
  • Starfall vehicles lack their own deorbit propulsion, relying on cold-gas attitude control thrusters, and use parachutes for descent after jettisoning a heat shield.
  • SpaceX aims to recover all vehicle elements by boat after splashdown.
  • This project could place SpaceX in direct competition with companies like Varda Space Industries, Inversion, and Atmos Space Cargo, which currently rely on SpaceX for launch services.
Decoder
  • In-space manufacturing: The process of manufacturing goods or materials in the microgravity environment of space, which can offer unique properties not achievable on Earth.
  • Point-to-point cargo delivery: The rapid transport of goods directly from one specific location on Earth to another, potentially using suborbital or orbital trajectories.
  • Reentry vehicle: A spacecraft designed to re-enter Earth's atmosphere safely, typically to return cargo or samples.
Original article

DUBLIN — Federal Aviation Administration documents have provided new details about a SpaceX project to develop and test reentry vehicles that could be used to support in-space manufacturing projects.

The FAA on May 15 issued an environmental assessment for test flights of Starfall, an uncrewed reentry vehicle. The FAA also issued a record of decision approving those test flights, concluding that they would not have any significant environmental impacts. The agency did not publicize the findings until it sent out an “FAA Space Update” on May 29.

The documents provide insights into Starfall, which SpaceX has not publicly discussed. Bloomberg first reported on the project last July, describing it as an in-space manufacturing program using capsules that would perform microgravity research and development, then return to Earth.

The FAA documents describe Starfall as serving both in-space manufacturing and point-to-point cargo delivery. The capsules could serve as a “proliferated successor” to the International Space Station to support “a self-sustaining manufacturing economy in space,” the documents state.

“The purpose of SpaceX’s proposal is to (1) enable point-to-point delivery of critical cargo through space on rapid timelines and (2) create a self-sustaining commercial in-space manufacturing market by offering access to microgravity and vacuum, loiter on orbit, and safe return from orbit as a service at scale,” the record of decision states.

The FAA decision approves two reentries of Starfall capsules in the Pacific Ocean about 1,300 kilometers off the coasts of California and Mexico. The capsules would launch on either Falcon 9 or Starship vehicles, going into orbit before reentry or flying a direct suborbital trajectory to the landing zone.

The capsules are disk-shaped, 0.75 meters tall and 3.1 meters in diameter at the top. The capsules have cold-gas attitude control thrusters but no other propulsion system and do not have the ability to deorbit on their own.

The vehicle consists of two parts: a top plate and a heat shield. The top plate is an aluminum structure partially wrapped in an unspecified thermal protection material and weighs 1,400 kilograms. The heat shield is a carbon-fiber structure covered in thermal protection material and also contains nitrogen gas bottles used for the thrusters and other systems. It weighs about 700 kilograms.

The vehicle would slow its descent using a single main parachute, along with pilot and drogue parachutes, with the heat shield jettisoned before splashdown. The FAA documents state that SpaceX will use boats to recover all elements of the spacecraft after splashdown.

The environmental assessment does not state when the test flights would take place and does not provide approvals for additional missions after the two test flights. However, the documents make clear SpaceX sees these as prototypes for spacecraft that would be built in large volumes.

SpaceX “plans to develop a mass producible reentry vehicle that can precisely deliver cargo from space to various locations on Earth, which would be able to launch on either Falcon 9 or Starship,” stated a document developed by contractor KBR that assessed sonic booms from Starfall reentries. That document also noted that Starfall will be able to carry up to 1,000 kilograms of payload in a volume measuring 2.5 by 1.5 by 0.5 meters inside the spacecraft.

Starfall would potentially put SpaceX into competition with companies that rely on SpaceX for launch services. Among them is Varda Space Industries, which has flown six of its W-series spacecraft on SpaceX rideshare missions, performing microgravity research and hypersonics testing with capsules that landed in Utah and Australia.

Inversion, another company developing reentry vehicles, flew its first spacecraft, Ray, on a SpaceX rideshare mission in 2025, but technical issues prevented the spacecraft from reentering as planned. Atmos Space Cargo, a European startup, flew its first reentry vehicle on a SpaceX rideshare mission in 2025 and plans to fly additional missions with SpaceX as well as on European small launch vehicles.

Several other companies, including Catalyx Space, Lux Aeterna and Reditus Space, have also announced plans for reusable spacecraft that would return to Earth and be recovered for reuse, with test flights planned through next year. They are also planning to rely in large part on SpaceX launches.

DEVOURED
Startup offers free home cleaning—if it can record it all for robot training

Startup offers free home cleaning—if it can record it all for robot training

Tech Ars Technica
German startup MicroAGI offers free NYC home cleaning if professional cleaners wear cameras to record all activities for training AI robots.
What: MicroAGI's Shift app, launched May 28, offers free home cleaning in New York City. Cleaners wear cameras to collect first-person video data to train household AI robots, with MicroAGI claiming anonymization and blurring of sensitive data before upload.
Why it matters: This reflects an emerging, ethically complex trend where companies incentivize individuals with free services or payments to collect vast amounts of real-world, first-person video data for embodied AI training.
Deep dive
  • MicroAGI, a German startup, launched its Shift app on May 28, 2026, offering free home cleaning services in New York City.
  • The condition for free cleaning is that professional cleaners will wear cameras to record their activities inside the homes.
  • This collected "first-person cleaning footage" is explicitly stated to be used for training "the next generation of household robots."
  • The company claims to use "advanced machine learning models" to automatically anonymize and blur "personally identifiable information" and "sensitive details" directly on the smart glasses before data is uploaded.
  • The privacy policy does not mention options for users to request video removal from training datasets or guarantee that homes cannot be identified from the footage.
  • The free cleaning offer is described as a "limited time" promotion, with the "core of MicroAGI's business" being data collection for robotics training.
  • The Shift app also recruits "operators" to wear headstraps and record daily tasks for $20/hour plus bonuses, claiming over 10,000 operators paid more than $5 million in Q1 2026.
  • This strategy is similar to other startups like Encord and Micro1, which also pay people to collect robot training data.
Decoder
  • Embodied AI: Artificial intelligence systems that interact with the physical world through a body, such as a robot, and learn from physical experiences.
Original article

A tech startup is offering New York City residents free home cleaning with a twist—it will send “professional cleaners” wearing cameras to record everything they do. All that data will supposedly be used to train AI-driven robots.

The unusual pitch comes from the German startup MicroAGI, whose website describes the company as a “team of engineers, researchers, and operators on a mission to accelerate embodied AI.” It began publicizing the free home-cleaning service run through its newly launched Shift app on May 28, with posts on social media sites such as X and LinkedIn featuring a video set to the upbeat piano notes of the Jay-Z and Alicia Keys song “Empire State of Mind.”

The Shift app website claims it “connects New Yorkers with free, trusted professional house cleaners” in exchange for recording “first-person cleaning footage to help train the next generation of household robots.” The “book a free cleaning” link directs clients to enter information such as a phone number, email address, and home address, along with access instructions, before booking an appointment that lasts an estimated two hours.

From a privacy standpoint, the Shift app website’s FAQ states that “names, faces or other personal information is automatically anonymized, with any sensitive details blurred before it’s ever used…. We blur all personally identifiable information from screens and ID cards, to pieces of paper and cell phones to help protect both you and your home.”

The Shift app’s privacy policy says the company uses “advanced machine learning models” running directly on smart glasses or video capture devices to “perform irreversible transformations such as automated face blurring and identifier obfuscation” before any data is uploaded to the company’s cloud servers.

But there is no mention of whether people can ever request that their home cleaning videos be removed from the training datasets for robots. And it’s unclear whether the company’s anonymization techniques are enough to ensure that people’s homes can’t ever be identified when they appear in training datasets.

Although the Shift app website claims “there is no catch” for the free cleaning, the FAQ notes that booking an appointment requires payment information and warns that clients may be charged if they cancel appointments with less than 24 hours’ notice or are not available to let cleaners in at the appointment time. The Shift app terms of service document also seeks to absolve the platform of responsibility for any property damage, theft, or personal injury that may ensue from the cleaning appointments.

The reason behind the promotion

So why would a tech startup offer free cleaning? The first-person cleaning data is supposedly valuable enough for the company to “offer cleaning services free of charge for a limited time” by covering the cost of the professional cleaners, according to the Shift app website. The Shift app’s privacy policy describes the “core of microagi’s business” as “the collection of data for robotics training.”

The temporary free cleaning offer for New York City homes may also serve as a promotional hook for the Shift app’s main purpose—recruiting people to wear a “recording headstrap” to “capture short videos of everyday household or professional tasks” in exchange for supposedly getting paid $20 per hour plus bonuses.

That primary function for the Shift app is briefly highlighted in the promotional video about free home cleanings, which shows US general manager Harry Kilberg claiming the platform already pays “tens of thousands of people” across 15 countries to record daily work and chores.

The main Shift app website, designed to sign up contributors, suggests that more than 10,000 “operators” have already been collectively paid more than $5 million in the first quarter of the 2026 fiscal year.

That makes MicroAGI one of the latest known startups to be recruiting and paying ordinary people to record their everyday tasks to provide robot training data. Other such companies include Encord and Micro1, with the latter having hired thousands of contract workers across 50 countries such as India, Nigeria, and Argentina, according to MIT Technology Review.

The Shift app’s website suggests MicroAGI is launching an aggressive recruiting campaign with dozens of blog posts tailored toward NYC university and college students, teachers, restaurant and delivery workers, and even residents of specific neighborhoods.

Meanwhile, the company has spread Craigslist postings targeting residents of other US cities such as Boston—and MicroAGI founder and CEO Bercan Kilic teased the prospect of the Shift app soon launching in additional cities such as London, Munich, and Zurich.

DEVOURED
Things I Think I Think... The New Internet Era

Things I Think I Think... The New Internet Era

Tech Neward &amp; Associates Blog
The author argues that the AI era parallels the dot-com boom, where long-term success will come from integrating AI as a strategic implementation tool, not from solely focusing on AI itself.
What: The article by Neward &amp; Associates suggests that, similar to the "Internet Era" where companies focused on "E-" or "I-" prefixes, the current "AI bubble" will burst. Successful companies will be those that integrate AI as a powerful part of their existing implementation strategy, rather than treating it as a standalone "Chief AI Officer" role.
Why it matters: This piece offers an editorial insight into the historical cycles of technological adoption, suggesting that foundational technologies eventually become ubiquitous utilities rather than distinct business focuses, leading to consolidation and a shift towards practical application.
Takeaway: Developers and companies should focus on integrating AI tools into existing products and workflows to solve specific problems, rather than building entire businesses solely around "AI."
Deep dive
  • The author draws parallels between the current "AI bubble" and the "Dot-Com Era," suggesting that the AI bubble will eventually burst.
  • The key insight from past technology booms is that successful companies learn to view the new technology (like the internet or electricity) as a means to an end, not the end itself.
  • Companies that thrived in the internet era integrated the internet into their existing business models, rather than just being "e-companies."
  • Similarly, success in the AI era will not come from creating "Chief AI Officers" but from understanding and implementing AI as a strategic part of existing operations.
  • The "moat" for companies will not be AI models themselves, as open-source and locally-trained models are becoming increasingly competitive.
  • Major tech companies like Apple, Microsoft, Meta, and Google are expected to survive because they have diverse product portfolios beyond AI.
  • Companies whose brands are too tightly aligned with AI, such as OpenAI and Anthropic, are predicted to struggle and potentially be acquired as their value degrades.
  • The author suggests that building custom AI agents with open-source tools is becoming a "coming-of-age trial" for developers, similar to building web servers in the 2000s.
  • NVIDIA's valuation may not grow much further, as other chip manufacturers like Intel and AMD are incentivized to develop their own cheaper and more available GPU lines.
  • Public backlash against AI could also harm companies whose brands are exclusively focused on AI.
Original article

Things I Think I Think... The New Internet Era

Mulling out loud (and defending) why I think the next few years are a new "Internet Era".

31 May 2026

Unless you are not yet old enough to drink, or lived out in a shack above the treeline in a mountain range, you probably remember to some degree the "Internet Era". Also known as the "Dot-Com Era" (along with its closely-released sequel, the "Dot-Bomb Era"), it was a time when the Internet was new, the boundaries were untested, and everyone's credulity was pushed out to the utter limits.

The reason I bring this up, of course, is that current thinking among AI critics holds that we are on the cusp of a "post-bubble" AI phase. That is to say, the "AI bubble" (which is a real thing, I hold that as axiomatic) is going to pop any day now, and when it does, all kinds of chaos and terribleness is unleashed. However, I draw different conclusions out of the "Dot-Com/Bomb" eras, mostly because (a) I already feel like I know the bubble is going to burst, so I don't have any real questions there, but (b) I want to know what's going to survive the silicon "pop" and what's not. And by "what" I mean "who"--which companies will survive the shift and which won't?

In the early days of the Internet, focus was on the Internet itself. Like it was, on its own, the end goal. Companies were formed to be "E-" companies (anything with an "e" prefix, a la "eBay") or an "I-" company (anything with an "i" prefix, a la "iMac"s, which obviously were a product and not a company but at the moment I can't think of a good "I-" company that's still around). The emphasis was on "The Internet"--whatever the company did, "The Internet" was at the center of it. Everything revolved around "The Internet". Microsoft even famously decided that it was going to put "The Internet" at the centerpiece of its operating system, when it decided to have users "browse their desktop" 1. "The Internet" was going to make everyone a ton of money, and everyone knew it.

And companies responded accordingly, in some cases going so far as to create "Chief Internet Officers". (Not to be confused with its contemporary cousin, the "Chief Web Officer".)

Before I continue on, I'd like to point out that this is not the first time the industry has responded to a new technology by seeking to create a top-level C-suite role for it and then turning to that individual and saying, "Go on! Make it happen!" At the turn of the previous century, the world saw the emergence of the Chief Electricity Officer, a role designed to bring the company in line with the burgeoning field of "electricity".

Funny how we don't have any of those around anymore.

This is because as time progressed, we came to realize that focusing on the technology itself doesn't accomplish much. All of the companies that were formed to focus on the thing--in the most recent example, The Internet--eventually came to realize that the thing is only useful as a means to some other end. OReilly (the book publisher) had a commercial web server product, as competition to Netscape's and Microsoft 2's commercial offerings. Today, the HTTP protocol is so ubiquitous (and, it turned out, simple) that we run HTTP servers out of single-line Python scripts. Just as electricity eventually just became part of the purview of the staff that manage the building's physical presence--and in some buildings, particularly manufacturing operations, that's a nontrivial task, to be sure--and dropped out of the CxO suite accordingly.

Success in either era came only when people realized that "the thing" was nothing more than a means to an end, and established the end accordingly. Electricity helps manufacture things, or helps the staff work more efficiently (consistent lighting) or provides power to automation (washers, dryers, etc). The only people who do anything around the electrical grid itself are commercial power producers, the folks who install solar panels on your roof, and electricians.

Therefore, success in this upcoming era will not be to those who establish "Chief AI Officers", but understand that AI is simply now a (powerful) part of your implementation strategy, and act (and code and staff and train) accordingly. The "moat" isn't AI itself, and the frontier models are never going to be "moaty enough" to keep a decent enough distance from open-source or locally-trained models. Just having a ton of compute available (which both of them don't have, as evidenced by Anthropic having to swallow its pride and sign the deal with Musk/X) isn't enough to keep the wolves at bay.

A couple of notes that I think come out of this:

  • Apple survives quite well, given its near total non-engagement with AI thus far.
  • Microsoft manages, though will have to do a ton of internal re-orgs to re-re-adjust to the new AI. Likewise for Facebook 3 and Google. Their stock may take a hit, executives may get cycled out for their "bad judgment" (even though a lot of it is being demanded by Boards), but they'll survive. They have other products on which they rely.
  • OpenAI and Anthropic will collapse, and quickly get snapped up by somebody else when their value degrades enough to be a "convenient buy". (Honestly, it's too easy to stand up your own "ChatGPT" using open-source tools, and many developers are now seeing "Write your own coding agent harness" as the new Coming-of-Age Trial in the same way we used to think about writing a web server back in the 2000s.) The shift of domains will likely be the biggest public impact, but the economic untangling of all the loans and VC debt could very well be a new "sub-prime"-level banking crater.
  • NVidia will never be much more valuable than it is now, because while the massive data centers aren't ever going to happen, the demand for GPUs will certainly continue. However, the manufacture of a GPU is not a relatively hard problem to solve if you're already a chip manufacturer, and Intel/AMD/others have plenty of incentive to retool some supply lines to start building out cheaper (and more importantly, available) GPU lines.

Keep in mind, too, that with the growing public backlash against all things AI (as exemplified by the "boos" at speakers praising AI during graduation speeches), companies whose brand is tightly aligned with AI (which seemed like a great idea in 2025 and a terrible idea for 2027) will likely take PR hits to go along with it all. Apple, Microsoft, Meta, they all have something to be known for beyond their AI efforts; OpenAI and Anthropic, not so much.



  1. Ironically, what subsequent releases later came to demonstrate was that they basically wanted the desktop to be an HTML page. The ironic part here is that this idea is so common now to so many different things--I mean, VSCode, an Electron app, is basically an HTML page with a full-page editor written in Javascript, when you boil away all the plugins--that it really doesn't even make anyone blink anymore, much less file lawsuits with the Department of Justice.

  2. Microsoft's Internet Information Server is the only one that's even remotely survived, it's now so deeply buried inside the operating system that I don't think anybody even still realizes it exists. It was there, though, last time I popped open the Control Panel and started looking around at the background services that get installed.

  3. Facebook/Meta's bigger problem appears to be the millions (literally) of lawsuits that are being brought against it for its social media algorithms. Those fines could stack up in a hurry, and the company may end up having to do some serious restructuring or become an acquisition target to survive. The social media website itself will survive, though, it's crossed the Threashold of Immortality by this point.


Tags: thinking disruption ai llm coding agent code
DEVOURED
Powerful AI Super PACs Duel Over the Midterms: ‘This Is a War'

Powerful AI Super PACs Duel Over the Midterms: ‘This Is a War'

Tech The New York Times
OpenAI and Anthropic are spending millions through AI Super PACs to influence the upcoming midterm elections, declaring it "a war."
What: OpenAI and Anthropic are actively funding Super PACs, spending significant amounts of money to impact this year's political races, as reported by The New York Times.
Why it matters: This reveals the growing political influence of major AI companies as they seek to shape policy and regulation directly through substantial financial contributions in elections.
Decoder
  • Super PAC: A type of independent political action committee that can raise unlimited sums of money from corporations, unions, associations, and individuals, then spend unlimited sums to overtly advocate for or against political candidates.
Original article

OpenAI and Anthropic are both spending millions to influence this year's elections.

DEVOURED
OpenCode Now Supports DigitalOcean Inference Router for Intelligent Model Routing

OpenCode Now Supports DigitalOcean Inference Router for Intelligent Model Routing

DevOps DigitalOcean
DigitalOcean launched an Inference Router in Public Preview, integrating with the 160,000-star OpenCode AI coding agent to intelligently route requests to the most cost-effective AI models.
What: DigitalOcean's new Inference Router, demoed by Tyler Gillam at Deploy 2026, aims to solve the "massive spending problem" of AI coding agents by routing requests to appropriate models instead of always using expensive frontier models. It offers an OpenAI-compatible API and is now natively supported by OpenCode.
Why it matters: This reflects a growing industry need for cost optimization in AI inference, moving beyond a "one-size-fits-all" approach to model usage, and hints at closer integration between cloud providers and open-source AI tools.
Takeaway: If you use OpenCode, try the /connect command to integrate with DigitalOcean's Inference Router for potential cost savings and optimized model selection.
Deep dive
  • DigitalOcean's Inference Router is in Public Preview as part of its AI-Native Cloud.
  • It dynamically routes AI requests to the most suitable model based on latency, cost, and quality, avoiding expensive "frontier" models for trivial tasks.
  • The router addresses the "massive spending problem" of AI coding agents, which often default to costly models for all requests.
  • It presents an OpenAI-compatible API, allowing developers to use model: "router:your-router-name".
  • OpenCode, a popular open-source AI coding agent with over 160,000 GitHub stars, now natively supports the Inference Router.
  • This integration was demoed live by Tyler Gillam at Deploy 2026.
  • Previously, integrating DigitalOcean models with OpenCode required manual opencode.json edits.
  • Musa Malik, an AI/ML Engineer at DigitalOcean, describes the router as "auto-mode pattern engineers are used to" for AI inference.
  • The initiative aims to make intelligent, cost-aware model routing a default for coding agents, recognizing the narrowing gap between frontier and "good enough" open-source models.
Decoder
  • Inference Router: A system that dynamically analyzes AI model requests and routes them to the most appropriate AI model based on factors like cost, latency, and required output quality, rather than using a single, often expensive, model for all tasks.
  • Frontier model: The most advanced and often most expensive large language models available at a given time, typically from leading AI labs.
  • OpenCode: An open-source AI coding agent on GitHub designed to be provider-agnostic, allowing developers to use various AI models.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
How We Reduced Median Memory Estimation Error by 99%, With the Help of AI

How We Reduced Median Memory Estimation Error by 99%, With the Help of AI

DevOps Mixpanel Substack
Mixpanel significantly reduced memory estimation errors in its compaction pipeline by 99% by replacing a crude multiplier model with a simple, AI-refined "last observed value" approach.
What: Mixpanel's engineering team discovered that a sophisticated "multiplier model" for estimating memory in their compaction pipeline was less accurate than a simple "last observed value" heuristic. By using AI-assisted analysis to identify and refine this simpler approach, they achieved a 99% reduction in median memory estimation error and improved production reliability.
Why it matters: This demonstrates that sometimes the simplest solutions, thoroughly validated with data and even AI assistance, can dramatically outperform complex, assumption-laden models, particularly in real-world systems where dynamic conditions challenge fixed heuristics.
Takeaway: If you're struggling with complex estimation models causing issues, consider re-evaluating simpler heuristics with robust empirical testing and data analysis; AI can assist in the analysis phase.
Deep dive
  • Mixpanel faced Out-Of-Memory (OOM) issues and inefficient resource usage in its compaction pipeline due to inaccurate memory estimation.
  • The existing memory estimation model used a "multiplier model," which applied factors to estimate future memory based on input size.
  • Engineers initially believed the complex model was better but discovered it was prone to error due to dynamic data patterns.
  • A simpler heuristic, "last observed value," which reuses the last actual memory usage, was found to be surprisingly effective.
  • AI-assisted large-scale analysis helped validate and refine the "last observed value" approach.
  • Implementing this simpler model resulted in a 99% reduction in median memory estimation error.
  • The change significantly improved the reliability and cost-efficiency of their production systems.
  • The lesson learned was that sometimes sophisticated models are based on flawed assumptions, and simpler, data-driven approaches can be superior.
Decoder
  • Compaction pipeline: A process in data storage systems that reorganizes and merges data segments to optimize storage space, improve read performance, and remove deleted data.
  • Out-Of-Memory (OOM): An error condition where a program or system attempts to allocate more memory than is available, leading to crashes or instability.
  • Heuristic: A practical, approximate problem-solving method that often works well but is not guaranteed to be optimal or perfect.
Original article

A compaction pipeline's memory estimates at Mixpanel were causing OOMs and inefficiency due to a crude multiplier model. Replacing it with a simple “last observed value” approach, refined through AI-assisted large-scale analysis, reduced median error by 99% and dramatically improved reliability in production.

DEVOURED
With Claude: Less Coding, More Testing

With Claude: Less Coding, More Testing

DevOps Henrik Warne's Blog
A developer using Claude Code found their workflow shifted from writing boilerplate to spending more time understanding and extensively testing AI-generated code, maintaining deep engagement with system details.
What: Henrik Warne describes how using Claude Code has transformed his development process, reducing manual coding while increasing time spent reviewing, understanding, and testing AI-generated solutions. He emphasizes that he remains responsible for design and details, using Claude to explore existing code and set up tests faster.
Why it matters: This suggests a new paradigm for software development with AI coding agents, where the developer's role evolves from primary code generation to critical review, validation, and system comprehension, reinforcing the idea that AI augments, rather than replaces, core engineering skills.
Takeaway: When integrating AI coding agents, proactively adapt your workflow to prioritize thorough code review, understanding system impacts, and rigorous testing of AI-generated components.
Deep dive
  • Henrik Warne has been using Claude Code for several months and observed a significant shift in his development workflow.
  • He now writes "a lot less code" but spends "more time understanding and testing the code Claude has written."
  • The developer retains responsibility for the system's design and implementation details.
  • Claude is used to quickly generate initial solutions, especially boilerplate and API usage.
  • An iterative process of asking Claude "what does this part do?" or "why is this here?" helps deepen understanding.
  • Setting up unit, integration, and exploratory tests is significantly faster with Claude's assistance.
  • Claude can also help create temporary local changes for testing scenarios, e.g., simulating midnight processing.
  • A surprising benefit is using Claude to explore and understand existing, unfamiliar codebases by asking explanation questions.
  • Warne asserts that AI is not an excuse to stop learning; understanding is still crucial to judge AI's output.
  • The experience is positive, speeding up many parts of development without losing the "joy of creating software."
  • The article alludes to John Salvatier's essay "Reality Has a Surprising Amount of Detail," reinforcing the need for developers to grasp implementation specifics.
Decoder
  • Claude Code: A large language model (LLM) developed by Anthropic, specifically used here for code generation and analysis in a development workflow.
  • Boilerplate code: Sections of code that are repeated in many places with little or no variation, often required for setup or standard functionality.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
State of Observability in Financial Services 2026: From implementation to business impact

State of Observability in Financial Services 2026: From implementation to business impact

DevOps Elastic
Financial services firms have rapidly matured observability to 70% expert levels by 2026, driven by cost pressures and 94% GenAI adoption, despite a glaring 89% LLM observability gap.
What: A 2026 Elastic report reveals 70% of financial services teams have expert observability practices, up from 45% last year. While 94% use GenAI for observability, 89% expect to monitor their own LLMs, but only 6% have implemented it. 99% of firms are cutting observability costs, and OpenTelemetry production usage tripled from 3% to 10%.
Why it matters: The financial sector is rapidly integrating AI into operations, but a significant gap in monitoring AI models themselves creates a blind spot. The push for cost optimization and OpenTelemetry standardization reflects a broader industry trend towards more efficient, vendor-agnostic infrastructure.
Takeaway: If you're building LLMs or AI applications in financial services, prioritize implementing observability for those models, as only 6% of firms currently do.
Deep dive
  • Observability practices in financial services matured rapidly, with 70% of teams reporting expert levels in 2026, a significant jump from 45% just one year prior.
  • 89% of teams now leverage observability data to directly report on business impact, indicating a shift from technical monitoring to strategic value extraction.
  • Cost pressure is immense, with 100% of companies reporting unexpected tool costs and 99% actively seeking to reduce observability spend.
  • Regulatory compliance, especially with GDPR (cited by 67%), remains a major challenge for 95% of firms, with 61% using observability platforms for real-time monitoring.
  • Generative AI (GenAI) adoption is nearly universal at 94% within the financial sector for observability use cases like anomaly detection and root cause analysis.
  • While GenAI adoption for infrastructure monitoring is high, there's a significant "LLM observability gap": 89% expect to monitor their internal LLM applications, but only 6% have implemented this capability.
  • OpenTelemetry (OTel) production usage tripled in the last year, reaching 10%, with 89% of evaluators considering OTel compliance critical for solution selection.
  • Observability data is becoming a shared source of truth, with 67% of cybersecurity teams relying on it for threat detection and investigation.
Decoder
  • OpenTelemetry (OTel): An open-source set of tools, APIs, and SDKs used to instrument, generate, collect, and export telemetry data (metrics, logs, and traces) to help understand software performance and behavior.
  • Generative AI (GenAI): A type of artificial intelligence that can create new content, such as text, images, or code, often based on patterns learned from existing data.
  • LLM observability: The practice of monitoring the performance, accuracy, and behavior of large language models (LLMs) to ensure they operate securely, accurately, and without issues like hallucinations or data leakage.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
The Speed of Prototyping in the Age of AI

The Speed of Prototyping in the Age of AI

DevOps darylcecile.net
AI has dramatically lowered prototyping costs, allowing developers to turn "nice idea, no time" concepts into working repositories much faster, while shifting the work towards higher-level architecture and delegation.
What: Daryl Cecile reports that AI has accelerated his personal prototyping speed by approximately 4x, measured by time-to-PR, enabling him to quickly build multiple complex projects like the Sakoa language and Plim block editor in 2026. This shift means he now focuses more on system architecture, boundaries, and delegation rather than writing every line of code.
Why it matters: AI agents are evolving from code assistants to collaborators capable of handling "boring bits" and scaffolding, pushing human developers to engage in more abstract, strategic thinking and design, potentially expanding the scope of what a single engineer can achieve.
Takeaway: Practice writing precise specifications and architectural outlines for systems, as this skill becomes increasingly valuable for effectively delegating tasks to AI agents or junior engineers.
Deep dive
  • Daryl Cecile, a developer, reports a significant shift in his workflow due to AI, allowing him to prototype ideas much faster than a few years ago.
  • He estimates his productivity, measured by time-to-PR for typical engineering tasks, is about 4x faster since integrating AI agents into his workflow.
  • This velocity has enabled him to develop multiple substantial prototypes (e.g., Sakoa language, Kato notation, Plim block editor) that would have previously been abandoned due to time constraints.
  • The nature of engineering work has changed, forcing him to think more about system boundaries, contracts, and architecture, and to write detailed prompts and specifications.
  • The skill of "describing exactly what success looks like" for an AI or junior engineer has become crucial, strengthening his delegation abilities.
  • Cecile acknowledges the "cost of speed," including a need to be deliberate about maintaining his own technical dexterity by engaging in manual coding, reading source code, and using debuggers.
  • The freed-up time, previously spent on "unavoidable middle bits," is now used for exploration, learning, and creative prototyping.
  • He notes similar observations from other engineers like Mike McQuaid (Homebrew lead) and Cassidy Williams, who are also leveraging AI for increased productivity and unique personal projects.
Decoder
  • Prototyping: The process of building an early, often incomplete, version of a product or system to test ideas, gather feedback, and validate concepts quickly.
  • Time-to-PR: A development metric representing the time taken from starting a task to submitting a pull request (PR) with the completed code changes.
  • MIR (Mid-level Intermediate Representation): In compiler design, an intermediate code representation that is typically closer to the target machine code than the high-level source code but still abstract enough to be optimized.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
A live data app for $0: DuckDB, Astro, and no BI tool

A live data app for $0: DuckDB, Astro, and no BI tool

Data spicydata.ai
This article details building a $0, fully interactive data app for finding tropical fruit in Hawaii using DuckDB, Astro, Leaflet, and GitHub Actions, bypassing traditional BI tools.
What: Josh built a data app with zero infrastructure cost, pulling 13,000 observations from the iNaturalist API, transforming them with DuckDB into a single data.json file, serving it with Astro and Leaflet, and refreshing weekly via GitHub Actions cron jobs.
Why it matters: It demonstrates a viable, cost-effective alternative to commercial BI tools like Tableau, Omni, or Hex for bespoke, on-brand data products, especially when robust governance or heavy analytics are not the primary need. It also highlights the growing power of AI-assisted coding for custom UI.
Takeaway: Consider using DuckDB and static site generators like Astro with GitHub Actions for interactive, custom data apps if you prioritize low cost, full design control, and don't need extensive BI features.
Deep dive
  • The app tracks seasonality and island density for 10 tropical fruits using 13,000 iNaturalist observations.
  • The stack includes iNaturalist API (data), DuckDB (transform), Astro/Leaflet/SVG (serve), GitHub Actions (refresh), and existing static hosting.
  • DuckDB, an in-process SQL engine like SQLite for analytics, directly reads CSVs, eliminating a load step, server, or warehouse.
  • The app generates a single data.json file after DuckDB processing, finishing in under a second.
  • Cost is $0 because data is open, engine embedded, cron included in free tier, and hosting is on an existing site.
  • Custom data visualization uses CSS variables for themes, allowing the entire app to restyle with a single toggle.
  • The entire interface was specified in natural language and coded by Claude Code, demonstrating AI's role in custom UI generation.
  • Compares open-source approach to Omni (governance), Hex (notebook-style apps), and Tableau (drag-to-explore).
  • Open source offers seamless integration with existing site design, unlike BI tools that embed their own chrome.
Decoder
  • DuckDB: An in-process SQL OLAP database system designed for analytical queries on structured data, often used for local data transformations.
  • Astro: A web framework for building fast, content-focused websites, popular for static site generation.
  • Leaflet: An open-source JavaScript library for mobile-friendly interactive maps.
  • iNaturalist API: A public API providing access to biodiversity observations recorded by citizens and scientists.
  • Claude Code: An AI code generation tool, likely referring to Anthropic's Claude model being used for code.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
Enabling Data Intelligence: Data Profiling Framework at Halodoc

Enabling Data Intelligence: Data Profiling Framework at Halodoc

Data Halodoc
Halodoc built an Airflow-native data profiling framework to automate data quality checks, join intelligence, and source table analysis across hundreds of tables.
What: Halodoc's Data Engineering team created an Airflow-native framework to automate column-level profiling, join intelligence extraction via SQLGlot, and source table analysis using information_schema. It runs compute on Redshift/Athena, isolating tasks in Kubernetes pods, and writes idempotent staging data using a `run_id` pattern.
Why it matters: This framework transforms data understanding from a manual, time-consuming process involving ad-hoc SQL into a self-serve, automated system, giving engineers and analysts a reliable, historical view of data quality and relationships, crucial for large, distributed data ecosystems.
Takeaway: If your data team spends significant time on manual data quality checks or struggling with join discovery, consider implementing a similar Airflow-native, config-driven data profiling framework with pushdown compute and idempotent staging writes.
Deep dive
  • Halodoc faced issues like lack of column-level visibility, late discovery of join failures, no historical baseline for data regressions, and engineers being bottlenecks for data questions.
  • Data profiling collects statistics and metadata on structure, content, and quality, covering null checks, uniqueness, distribution, and schema.
  • The framework has three main components: Column-Level Profiler, Join Intelligence, and Source Table Analyser.
  • Compute is pushed down to Redshift or Athena, and tasks are isolated in Kubernetes pods using Airflow's dynamic task mapping.
  • Results are stored in Redshift for central querying and visualization via Metabase dashboards.
  • The framework is config-driven, allowing new tables to be profiled via JSON configs without code changes.
  • Column-Level Profiler: Generates dynamic SQL to compute null percentages, distinct counts, min/max, length ranges, and numeric stats in a single table scan. It also provides value distribution and sample records.
  • Join Intelligence: Extracts join relationships directly from production SQL files in S3 using SQLGlot for AST traversal, supporting dialect detection and fallback strategies.
  • Source Table Analyser: Profiles source systems safely by using information_schema and engine metadata, avoiding full-table scans on OLTP databases. It also combines Hudi metrics for partition recommendations and compaction insights.
  • Implementation ensures operational safety and scalability via a "validation first" Airflow DAG structure and idempotent staging table writes using a DELETE + COPY + INSERT pattern with a unique run_id.
  • Impact included reducing column understanding time from an hour to 10 minutes, join discovery from 30-60 minutes to under 10, and proactively identifying regressions and compaction issues.
  • Challenges included SQL diversity (macros, mixed dialects), parser fallbacks, staging table concurrency, and approximate information_schema row counts.
Decoder
  • Data Profiling: The process of examining datasets to collect statistics and metadata that describe their structure, content, and quality, to improve data understanding and identify issues.
  • Airflow: An open-source platform to programmatically author, schedule, and monitor workflows, often used for data orchestration.
  • Redshift: Amazon's cloud data warehouse service.
  • Athena: Amazon's serverless query service that allows querying data directly in Amazon S3 using standard SQL.
  • SQLGlot: A SQL parser, transpiler, and optimizer written in Python, capable of converting SQL between different dialects and building abstract syntax trees (ASTs).
  • AST (Abstract Syntax Tree): A tree representation of the syntactic structure of source code, used in SQLGlot to parse and analyze SQL queries.
  • Jinja macros: Templating language constructs used to generate dynamic content, often found in SQL queries within data pipelines.
  • OLTP (Online Transaction Processing): A class of software systems that facilitate and manage transaction-oriented applications, typically characterized by many concurrent, short online transactions.
  • Hudi: An open-source data lake platform that provides ACID transactions, upserts, and deletes on large datasets stored in object storage like S3.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
Event-Driven vs. Polling Architectures for Agent Triggers

Event-Driven vs. Polling Architectures for Agent Triggers

Data agentblueprint.substack.com
Agent trigger architectures should prioritize delivery contracts and idempotency, combining fast-path events, reconciliation polling, and durable runtimes, rather than choosing simply between webhooks and polling.
What: The article argues that agent trigger design requires understanding delivery contracts, as webhooks are typically at-least-once and unordered, while polling can hit rate limits. It advocates for combining fast-path events, reconciliation polling/replay, structural idempotency keys, and durable runtimes to handle duplicates, missed events, and retries in long-running agent systems.
Why it matters: This illustrates the complexities of building robust, production-ready agent systems, emphasizing that reliable event processing requires a multi-faceted approach beyond basic trigger mechanisms, focusing on fault tolerance, state management, and the guarantees (or lack thereof) of underlying messaging systems.
Takeaway: When designing agent systems, assume event delivery is unreliable (at-least-once, unordered, potentially delayed). Implement idempotent operations, use structural keys for de-duplication, and consider a hybrid trigger approach combining event-driven paths with periodic reconciliation polling.
Decoder
  • Delivery contracts: The guarantees and characteristics of how messages or events are delivered in a distributed system, specifying aspects like ordering, exactly-once vs. at-least-once delivery, and reliability.
  • At-least-once delivery: A messaging guarantee where a message is delivered to the consumer one or more times; the consumer must be able to handle duplicates.
  • Idempotency: The property of an operation that, when executed multiple times with the same input, produces the same result as if it had been executed only once. Crucial for handling retries and duplicates in distributed systems.
  • CDC (Change Data Capture): A set of software design patterns used to determine and track the changes in data so that action can be taken using the changed data.
  • Message bus: A software infrastructure that enables communication between different applications by allowing them to exchange messages, often providing features like asynchronous messaging and publish/subscribe patterns.
  • Structural idempotency keys: Unique identifiers embedded within the payload or metadata of a request that allow a system to detect and safely ignore duplicate requests.
Original article

Agent trigger architecture should be designed around delivery contracts, not a simplistic webhook-vs-polling choice. Webhooks are usually at-least-once, unordered, and best-effort. Polling can blow through rate limits. CDC and message buses offer stronger replay and durability, but still require idempotent handling. Mature agent systems typically combine fast-path events, reconciliation polling or replay, structural idempotency keys, and durable runtimes so long-running agents can survive duplicates, missed events, retries, and external waits.

DEVOURED
MOR Isn't a Storage Optimization. It's an Architectural Shift

MOR Isn't a Storage Optimization. It's an Architectural Shift

Data Medium
Merge-On-Read (MOR) is introduced as an architectural shift for databases, deferring expensive data compaction to background processes for high-frequency streaming updates, unlike Copy-On-Write (COW).
What: MOR appends changes to log files and defers merge/compaction, shifting optimization from write time to a scheduled background process. This contrasts with Copy-On-Write (COW), which synchronously rewrites entire files on every mutation.
Why it matters: This design choice indicates an industry trend towards optimizing data systems for real-time, high-frequency data ingestion and streaming workloads, trading immediate write performance for more controlled, scheduled maintenance and potentially higher read amplification.
Decoder
  • Copy-On-Write (COW): A data management technique where, instead of modifying data in place, a new copy of the data is made with the changes, ensuring data immutability and often simplifying concurrency control.
  • Merge-On-Read (MOR): A data management technique where new data is appended to existing files or logs, and changes are merged or compacted during read operations or as a background process, rather than incurring immediate write penalties.
Original article

Instead of synchronously rewriting entire files on every mutation (Copy-On-Write), MOR (Merge-On-Read) appends changes to log files and defers the expensive merge/compaction work to a background process, effectively time-shifting optimization from write time to a separate, controllable schedule. This design better supports high-frequency streaming updates and CDC workloads, though it introduces tradeoffs in read amplification and compaction management.

DEVOURED
ktx (GitHub Repo)

ktx (GitHub Repo)

Data GitHub
Kaelio's open-source `ktx` provides a local, self-improving context layer for data agents like Claude, Codex, and Cursor to generate accurate SQL from trusted metric definitions and company knowledge.
What: `ktx` is a local context layer that helps data agents query warehouses by combining approved metrics, join logic, warehouse metadata, and company knowledge. It works with PostgreSQL, Snowflake, BigQuery, ClickHouse, MySQL, SQL Server, and SQLite, and integrates with dbt, MetricFlow, LookML, Looker, Metabase, and Notion. It runs locally and doesn't send schema or query results to a hosted service.
Why it matters: This tool addresses the critical challenge of ensuring AI agents produce accurate, trustworthy results in complex data environments, highlighting the need for specialized context management layers beyond general-purpose LLMs or traditional semantic layers. It points to a future where agents require meticulously curated and integrated knowledge bases to be truly effective in enterprise data analytics.
Takeaway: If you use data agents like Claude Code or Cursor with a SQL warehouse and struggle with consistent, accurate queries, explore `ktx` as a local, open-source context layer to improve reliability.
Decoder
  • Data agent: An AI system designed to perform tasks involving data, often by interacting with databases, APIs, or other data sources.
  • Semantic layer: A layer in a data architecture that translates complex database structures into business-friendly terms, providing a consistent view of data for reporting and analysis.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
Apache Iceberg 1.11.0 Adds registerView: Closing a Catalog Migration Gap

Apache Iceberg 1.11.0 Adds registerView: Closing a Catalog Migration Gap

Data Medium
Apache Iceberg 1.11.0 introduces `registerView`, a new primitive that enables metadata-preserving migration of existing Iceberg views across catalogs without needing SQL recreation.
What: Apache Iceberg 1.11.0 adds `registerView` to register existing Iceberg views directly from metadata files, streamlining catalog-to-catalog migrations, disaster recovery, and blue-green catalog upgrades. The update also includes a dedicated REST Catalog endpoint for authorization and compatibility.
Why it matters: This feature simplifies operations for data architects and engineers managing large-scale data lakes built on Iceberg, indicating a maturing ecosystem focused on robust, vendor-agnostic data management and operational resilience.
Decoder
  • Apache Iceberg: An open table format for huge analytic datasets. Iceberg adds SQL table capabilities to data files in data lakes like object storage, allowing for ACID transactions, schema evolution, and time travel.
  • REST Catalog: A catalog service that exposes an API over HTTP/REST, allowing clients to interact with data assets (tables, views) using standard web protocols.
Original article

Apache Iceberg 1.11.0 adds ‘registerView', a metadata-preserving migration primitive that lets catalogs register existing Iceberg views from metadata files instead of recreating them from SQL. The release also adds a dedicated REST Catalog endpoint enabling cleaner authorization, capability signaling, and backward compatibility. This closes a migration gap for catalog-to-catalog moves, DR workflows, blue-green catalog upgrades, and tools like the Apache Polaris Iceberg Catalog Migrator.

DEVOURED
Introducing CostBench: an Open Benchmark for Data Warehouse Cost-performance

Introducing CostBench: an Open Benchmark for Data Warehouse Cost-performance

Data ClickHouse
ClickHouse introduces CostBench, an open-source benchmark to evaluate cloud data warehouses on "performance-per-dollar" for real-time analytical workloads, not just raw speed.
What: CostBench measures read-side and write-side cost-performance (performance-per-dollar) across ClickHouse Cloud, Snowflake, Databricks, BigQuery, and Redshift. The initial release focuses on read-side performance using 43 production-derived analytical queries, showing ClickHouse Cloud as significantly more cost-effective in early tests.
Why it matters: This benchmark directly addresses a critical and often opaque aspect of cloud data platforms: the true cost-efficiency, especially relevant as AI agents increase query volumes. It signals a move towards greater transparency and a more holistic evaluation of data infrastructure beyond simple speed metrics.
Takeaway: If you're evaluating cloud data warehouses for real-time analytics, consider using CostBench to compare price-performance across vendors, especially if query volume and continuous ingestion are key concerns.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
Introducing Neo4j Virtual Graph: Graph reasoning on the data you already have

Introducing Neo4j Virtual Graph: Graph reasoning on the data you already have

Data Neo4j
Neo4j launched Virtual Graph, a private preview feature enabling users to run Cypher queries and graph algorithms directly on data in SQL warehouses like Snowflake and Databricks without moving it.
What: Firat Tekiner and Michael Simons announced Neo4j Virtual Graph, now in private preview, which allows graph reasoning on existing enterprise data in SQL warehouses and lakehouses. It compiles Cypher queries into native SQL, letting teams run traversals and graph algorithms against current data without ETL pipelines, supporting GraphRAG and agentic workflows where seconds-to-minutes latency is acceptable.
Why it matters: This product addresses a core enterprise dilemma: the need for graph intelligence for AI agents while avoiding data duplication and maintaining existing data governance. It signifies a strategic move to broaden graph database adoption by meeting data where it already lives, making graph capabilities accessible to a much wider array of data professionals.
Takeaway: If your organization has large datasets in Snowflake or Databricks and is exploring graph-based AI/agentic workflows but is hesitant to move data, consider joining the Neo4j Virtual Graph private preview.
Deep dive
  • Neo4j Virtual Graph, now in private preview, enables graph reasoning directly on data stored in existing SQL warehouses (Snowflake, Databricks).
  • It uses a "zero-copy" architecture, meaning data remains in its original location, governed by existing controls.
  • The system compiles Cypher queries into native SQL, pushing computation down to the existing warehouse engine.
  • It addresses the challenge of providing connected data for AI agents and GraphRAG without requiring data migration or ETL.
  • Virtual Graph automatically generates a graph data model from existing SQL tables, inferring nodes, relationships (even without foreign keys), and properties.
  • It is designed for analytical and batch agentic workloads where latencies of seconds to minutes are acceptable, rather than real-time, millisecond-latency traversals.
  • The solution integrates with Neo4j Aura and consists of a data model, a query translator, and a graph compute layer.
  • Neo4j clarifies that Virtual Graph complements, rather than replaces, native Neo4j-stored graphs, which are still recommended for high-latency, ACID-compliant, continuously updated, or naturally graph-shaped data.
  • Future plans include support for more SQL sources (any JDBC/SQL interface), adaptive caching for lower latency, and composite queries spanning both AuraDB and Virtual Graph.
Decoder
  • GraphRAG (Retrieval Augmented Generation with Graphs): An AI architecture that combines a large language model (LLM) with a graph database to enhance the LLM's ability to retrieve and reason over complex, connected information for more accurate and contextually relevant responses.
  • Cypher: Neo4j's declarative graph query language, optimized for expressing patterns and relationships in graph databases.
  • SQL Lakehouse: A data architecture that combines the low-cost storage of a data lake with the data management and analytics capabilities of a data warehouse, typically built on open formats like Parquet and Delta Lake.
  • ETL pipeline (Extract, Transform, Load): A process used in data warehousing to extract data from sources, transform it into a consistent format, and load it into a target system.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
YouTube Will Now Auto-label AI-generated Videos

YouTube Will Now Auto-label AI-generated Videos

Design The Next Web
Starting May 2026, YouTube will automatically detect and prominently label AI-generated video content, moving away from voluntary creator disclosures.
What: YouTube is implementing an automated system to identify significant photorealistic AI content, with labels appearing below videos or as overlays on Shorts. This system will utilize internal signals, C2PA metadata, and Google's SynthID watermarks, with permanent labels for content made with YouTube's own AI tools like Veo, Gemini Omni, and Dream Screen.
Why it matters: This shift reflects a broader industry move by major platforms like Meta and TikTok to enforce transparency for AI-generated content, acknowledging that voluntary creator disclosure has proven unreliable and positioning YouTube ahead of the EU's AI Act transparency obligations taking effect in August 2026.
Takeaway: If you produce content for YouTube, be aware that AI-generated portions of your videos may be automatically detected and labeled starting in May 2026, regardless of your disclosure.
Deep dive
  • YouTube will begin automatically detecting and labeling videos with significant photorealistic AI-generated content starting in May 2026.
  • This moves beyond the previous voluntary creator disclosure system, which launched in 2024 and proved unreliable.
  • Labels will be more prominent, appearing directly below long-form videos or as overlays on Shorts, unlike before when they were often hidden in descriptions or only prominent for sensitive topics.
  • The detection system will use a combination of YouTube's internal signals, C2PA metadata, and Google's SynthID watermarks.
  • Content created using YouTube's own AI tools (Veo, Gemini Omni, Dream Screen) or verified by C2PA metadata will receive permanent labels.
  • Creators can contest automated labels, indicating YouTube expects some false positives.
  • These labels are informational, not punitive, and will not affect monetization or algorithmic recommendations.
  • YouTube expanded its deepfake protection on May 16, 2026, allowing any adult aged 18+ to request removal of AI-generated content depicting their likeness, moving beyond just public figures.
  • The timing aligns with the European Commission’s AI Act transparency obligations, which take effect in August 2026, requiring platforms to label AI content.
  • The platform is simultaneously investing in AI creation features like Ask YouTube, an AI playlist generator, and Gemini Omni integration into Shorts Remix.
  • The challenge is balancing ease of creation with reliable detection and whether viewers will genuinely care about these labels.
Decoder
  • C2PA (Coalition for Content Provenance and Authenticity): An open standard founded by Adobe, Arm, BBC, Intel, Microsoft, and Truepic in 2021, which attaches metadata to digital files to record their origin and editing history.
  • SynthID: Google's imperceptible watermarking tool that embeds a signal directly into AI-generated content (images and videos) for detection systems, while remaining invisible to human viewers.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
Figma Make, Now on Your Local Code

Figma Make, Now on Your Local Code

Design Figma
Figma Make now allows designers to visually edit and annotate directly within a production codebase, integrating design and code workflows via Git.
What: Figma Make's limited beta introduces features for direct editing, annotations, and creating pull requests from within Figma, working with local codebases. This update also enables two-way collaboration between Make and the Figma canvas, bridging the design-to-code gap.
Why it matters: This moves Figma deeper into the development workflow, allowing designers to work closer to the final product code rather than in isolated design files, potentially streamlining handoff and reducing discrepancies between design and implementation.
Takeaway: If your team uses Figma and is grappling with design-to-code handoff, exploring Figma Make's beta might offer a more integrated workflow.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
Could AI Help Us to Design and Build More Inclusive Digital Experiences?

Could AI Help Us to Design and Build More Inclusive Digital Experiences?

Design VCCP
AI can assist in identifying accessibility issues and inclusivity gaps in digital design, but it can't replace human-centered methods or diverse community involvement.
What: Steph Marques, Head of UX at Bernadette, suggests that AI tools like Gemini can audit digital experiences for dark UX patterns, inclusivity, and accessibility gaps, as tested on written ideas. However, she stresses that AI cannot replicate human input or fully represent diverse backgrounds.
Why it matters: This discussion highlights a critical tension in AI adoption: its potential to scale analysis and catch oversights versus the irreplaceable need for human empathy, diverse perspectives, and direct community involvement in truly inclusive design.
Takeaway: Consider integrating AI tools for initial accessibility audits in your design process, but ensure human-centered testing with diverse users remains the ultimate validation.
Decoder
  • Dark UX patterns: User interface designs that trick or manipulate users into doing things they might not otherwise do, often benefiting the business at the user's expense.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
The AI agent bottleneck isn't model performance — it's permissions

The AI agent bottleneck isn't model performance — it's permissions

AI VentureBeat
Enterprise AI agents are reportedly bottlenecked by permissioning issues, not model performance, with Workday using its system of record for robust governance, integrating with Google's Gemini.
What: The main obstacle for enterprise AI agents is managing permissions, not their underlying model capabilities. Workday addresses this by leveraging its existing system of record for governance, ensuring agents operating with Google's Gemini adhere to user-defined permissions, especially critical for regulated sectors like HR and finance.
Why it matters: This reveals a critical challenge for enterprise AI adoption: the technical prowess of LLMs is secondary to the practical and regulatory necessity of robust security and permissioning, pushing companies to integrate AI deeply with existing governance frameworks.
Takeaway: When designing or implementing AI agents in an enterprise context, prioritize integrating them with existing identity and access management (IAM) and governance systems from the outset.
Decoder
  • System of Record: A data management system that serves as the authoritative source for a particular set of information within an organization, ensuring data integrity and consistency.
Original article

Enterprise AI agents are struggling due to permissioning issues rather than model performance. Workday addresses this by using its system of record as the governance layer, integrating with Google's Gemini, and emphasizing agent accuracy. This setup ensures agents operate within defined user permissions, crucial for regulated sectors like HR and finance.

DEVOURED
3 upcoming NotebookLM features we all should be waiting for

3 upcoming NotebookLM features we all should be waiting for

AI TestingCatalog
Google's NotebookLM is preparing to launch Personal Preferences, Connectors for external data, and a Canvas feature for interactive visualizations, building on its recent Gemini 3.5 Flash update.
What: NotebookLM will soon introduce three major features: Personal Preferences for customizable AI interaction, Connectors to pull data from Google services like Gmail and Drive, and Canvas for creating interactive timelines, web pages, or visualizers from sources. The tool recently moved to Gemini 3.5 Flash as its underlying model.
Why it matters: These updates signify Google's strategy to transform NotebookLM from a source-grounded reader into a comprehensive workspace for structured, visual experiences, deepening its integration within the broader Google ecosystem and moving towards personalized, data-rich AI productivity.
Takeaway: Keep an eye on NotebookLM updates if you use Google's ecosystem for research or content creation, as these features could significantly streamline workflows by integrating external data and enabling rich output formats.
Decoder
  • NotebookLM: A Google AI-powered tool designed to help users synthesize information from their own documents, acting as a "virtual research assistant."
  • Gemini 3.5 Flash: Google's latest, faster, and more efficient large language model, succeeding previous Gemini versions.
Original article

Google appears to be lining up a batch of NotebookLM features that have been in the works for months, surfacing quietly in recent builds even as the team drops hints that an announcement may not be far off. Three additions stand out, and together they sketch a clear direction.

as is tradition, NotebookLM’s big update is not on IO day…

Team has cooked.

— Simon (@tokumin) May 24, 2026

The first is Personal Preferences, which debuted in Gemini and is now set to reach NotebookLM. It would let the tool learn from your activity and build editable personas, adjusting tone and technical depth to how you work. While Gemini’s version reaches into Gmail, Drive, Photos, and Calendar, the NotebookLM signals so far lean toward in-app personalization drawn from your notebooks and chats, which is useful for anyone doing repeated, deep-context research.

Allow NotebookLM to use your past interactions (e.g., conversations, artifacts, and customization instructions) to understand your preferences and tailor the experience to your needs. 

Connectors, sitting alongside it in settings, would close that gap. Working much like MCP, it would pull outside data into a notebook, most likely starting with Google’s own services such as Calendar, Gmail, and Drive. The piece is not yet operational, and the roster of supported sources remains open.

Canvas is arguably the headline. Found in the Studio panel, it would turn sources into a custom artifact — an interactive timeline, an explainer web page, a lightweight game, or a visualizer, guided by a prompt describing what you want and how. It extends the outputs that NotebookLM already offers, including infographics, slide decks, data tables, and mind maps.

The combination is where it gets compelling. With NotebookLM now living inside Gemini, the three would let people work across their sources without copying material between tools, matching Google’s push to turn a source-grounded reader into a workspace for building structured, visual experiences on top of documents.

On models, NotebookLM moved to Gemini 3 late last year; with Gemini 3.5 Flash now the global default after I/O 2026, the Flash branch of that family is the natural next base. A firm timeline is still missing, so the open question is when, not whether.

DEVOURED
Apple Seeks to Disrupt the Glasses Market the Way It Did With Watches

Apple Seeks to Disrupt the Glasses Market the Way It Did With Watches

Tech Bloomberg
Apple plans to enter the $200 billion eyewear market with mid-tier glasses priced between $200 and $500, aiming to replicate its success with the Apple Watch.
What: Apple is reportedly targeting the broader glasses market with devices priced from $200 to $500, leveraging its brand, industrial design, and iPhone integration, similar to how it disrupted the traditional wristwatch market.
Why it matters: This move shows Apple's strategy of identifying large, established product categories with high annual sales (hundreds of millions of pairs of glasses) and applying its ecosystem integration and design prowess to capture a significant market share.
Original article

Apple upended the mid-tier traditional wristwatch market after it showed customers the appeal of buying a device that paired with their iPhones, tracked health metrics, and still told the time. The company now sees a similar opportunity with glasses. It plans to target the broader glasses category with products sold between roughly $200 and $500. The eyewear market is valued at roughly $200 billion annually and hundreds of millions of pairs are sold each year. Apple believes that its strong brand, industrial design, and iPhone integration will lead people seeking new glasses to buy from Apple instead.

DEVOURED
The Last Technical Interview

The Last Technical Interview

Tech Steve Yegge
Silicon Valley companies are increasingly replacing traditional technical interviews with paid, multi-day work trials on real codebases with the actual team.
What: A new trend in Silicon Valley hiring involves companies paying candidates to work for a few days on real codebases with their potential team. This "interview" method provides strong signals for both the company and the candidate, offering a more realistic assessment than traditional interviews.
Why it matters: This shift reflects an industry-wide effort to reduce the high cost and low signal-to-noise ratio of conventional technical interviews, aiming for more accurate hiring decisions by observing candidates in an authentic work environment.
Takeaway: If you're interviewing in tech, especially at startups or innovative companies, be prepared for potential requests to participate in short-term, paid work trials as part of the hiring process.
Original article

Interviewing has always been costly for both the company and the candidate. A new type of interviewing is starting to emerge in Silicon Valley. Companies are hiring potential candidates to work with them for a few days with real pay, on real codebases, with the real team. This type of interview provides a strong signal to the company, and it also provides real value to the candidates.

DEVOURED
Meta is reportedly working on an AI pendant and more smart glasses

Meta is reportedly working on an AI pendant and more smart glasses

Tech Engadget
Meta plans to test an AI pendant and release up to four new smart glasses models by year-end, including "Modelo" in June, to boost its Reality Labs division.
What: Meta is developing an AI pendant for testing within the next year, following its 2025 acquisition of Limitless, maker of a similar "Pendant" device. Additionally, Meta aims to release four new smart glasses models, codenamed "Modelo" (June), "Luna" and "RBM2 Refresh" (fall), and "Mojito VIP" (December), powered by Meta's AI models and the unreleased agent Hatch.
Why it matters: This signals Meta's aggressive strategy to pivot its struggling Reality Labs division toward AI-powered wearables as a core product, moving beyond VR/AR headsets to integrate AI more directly into daily life through personal, always-on devices.
Deep dive
  • Meta is reportedly developing an AI pendant and plans to begin testing it within the next year.
  • This move follows Meta's acquisition of Limitless in 2025, a company known for its "Pendant" clip-on AI device that records conversations for summaries and transcripts.
  • Meta intends to launch up to four new smart glasses models by the end of 2026, building on its collaborations with Ray-Ban and Oakley.
  • The planned smart glasses models include "Modelo" (June), "Luna" and "RBM2 Refresh" (fall), and "Mojito VIP" (December).
  • Future models like "Artemis" and "SSG" (supersensing glasses) are also in testing.
  • All new glasses will be powered by Meta's AI models and its unreleased consumer AI agent, Hatch.
  • Meta's VP for wearables, Alex Himel, aims to sell 10 million wearables in the second half of 2026 and expand availability to more countries.
  • The company is also launching "Wearables for Work," a business-focused subscription service, targeting 10 companies and deploying 100 devices each to at least two large organizations.
  • This aggressive push is an attempt to recover from significant losses in Meta's Reality Labs division, which lost $19 billion in 2025.
  • Mark Zuckerberg indicated that Reality Labs would focus on glasses and wearables to reduce losses going forward.
Original article

Meta is reportedly working on an AI pendant and more smart glasses

Meta is developing an AI pendant and will start testing it over the coming year, according to The Information. In addition, the company is reportedly gearing up to release up to four more models of smart glasses before the year ends, as part of an aggressive plan to make up for the massive losses of its Reality Labs division, which houses its hardware business.

While Meta has yet to confirm the report, it was pretty much a given that the company would start working on an AI pendant after it purchased Limitless in 2025. Limitless was the maker of an AI device literally called "Pendant," a clip-on Bluetooth microphone that listens and records everything you say or hear throughout the day so it can provide summaries, transcripts and a searchable database of conversations and things you record for yourself. "Meta recently announced a new vision to bring personal superintelligence to everyone and a key part of that vision is building incredible AI-enabled wearables," Limitless CEO Dan Siroker said at the time.

The Information also reports that Meta is planning to expand its AI glasses selection significantly and to launch a business-focused subscription service called "Wearables for Work." Meta's VP for wearables, Alex Himel, reportedly wrote in an internal memo that the goal is to get more people to use the company's AI models and to compel them to pay for subscriptions. That includes subscriptions for Hatch, its unreleased consumer AI agent that's currently under development. (Meta recently launched subscriptions tiers with exclusive features for Instagram, Facebook and WhatsApp, which will test out its new monthly payment system called Meta One.)

The company also wants to expand its smart glasses offerings beyond its collaborations with Ray-Ban and Oakley, Himel wrote in the memo. According to the publication, Meta is debuting a new pair codenamed "Modelo" as soon as June. "Luna" and "RBM2 Refresh," which sounds like another Ray-Ban model, will follow this fall. The last pair that Meta plans to release this year in December is called "Mojito VIP." Meta is also reportedly testing models named "Artemis" and "SSG" (or "supersensing" glasses) for future releases. The new glasses will, of course, be powered by Meta's AI models, along with the unreleased AI agent Hatch.

Hime told employees that Meta's goal is to sell 10 million wearables in the second half of 2026, not just by launching new products, but also by making them available in more countries. The company is aiming to get at least 10 companies to sign up for its Wearables for Work for commercial customers, as well, the publication says. It's targeting deployments to at least two large organizations that need 100 devices each.

Meta's Reality Labs division has been bleeding money for years and lost $19 billion in 2025 alone. Mark Zuckerberg told investors during Meta's earnings call for the fourth quarter of 2025 that the division is going to focus on glasses and wearables going forward, and that the company expects the division's losses to gradually become smaller.

DEVOURED
Humanoid Hands Are Physical AI's Anti-Hype Test

Humanoid Hands Are Physical AI's Anti-Hype Test

Tech Bloomberg
Perfecting robotic hands is a critical test for physical AI, promising widespread automation and improved prosthetics for people.
What: The article highlights that developing sophisticated robotic hands is a crucial challenge for physical AI, with success enabling broad automation and better prosthetic limbs for humans.
Why it matters: This emphasizes that practical applications of AI extend beyond software into complex physical interaction, revealing fundamental hardware limitations that still exist in the field.
Original article

Perfecting robotic hands could unlock many useful forms of automation and also result in better prosthetics for people who need them.

DEVOURED
SQLite is All You Need for Durable Workflows

SQLite is All You Need for Durable Workflows

Data obeli.sk
Durable AI workflows can use local SQLite with Litestream for backups, offering simple, cheap, and inspectable state for agents without heavy infrastructure.
What: This short article suggests that local SQLite databases, coupled with Litestream for replication and backup, are sufficient for durable AI workflows and agent state management, offering a simple and cost-effective alternative to more complex orchestration tools or database systems like Postgres.
Why it matters: It highlights a growing trend of "boring technology" adoption for specific use cases, where the simplicity and low operational overhead of embedded databases like SQLite, combined with robust backup solutions, are preferred over feature-rich but more complex alternatives.
Takeaway: If you're building simple, durable AI agents or workflows that need local, persistent state and don't require high availability or shared scalability, consider using SQLite with Litestream for a lightweight solution.
Decoder
  • Durable workflows: Workflows designed to tolerate failures and resume execution from the point of failure, ensuring that tasks are completed reliably even with interruptions.
  • SQLite: A C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. It's often embedded directly into applications.
  • Litestream: An open-source tool that streams SQLite database changes to object storage (like S3) for continuous backup and disaster recovery.
Original article

Durable AI workflows can use local SQLite plus Litestream backups instead of heavier orchestration or database infrastructure. The tradeoff is simple, cheap, inspectable state for agents, unless you need high availability or shared scalability, where Postgres still fits better.

DEVOURED
The best of CPDP 2026

The best of CPDP 2026

Data Zero Party Data
CPDP 2026 underscored mounting regulatory pressure on AI and data governance, focusing on age-gating, biometric verification, health data, AI chatbot privacy, and the enforcement gap between compliance and reality.
What: The Computers, Privacy, and Data Protection 2026 conference addressed topics like age-gating, biometric processing bans in Australia, children's digital rights, and the privacy implications of AI chatbots, with 230 million weekly health-related ChatGPT queries cited. Discussions highlighted the growing workload for DPOs, the Digital Services Act (DSA) compliance issues (e.g., LinkedIn's moderation opacity), and the European Commission's "Tech Sovereignty Package" promoting EU cloud for sensitive public data.
Why it matters: The conference reveals a deepening global regulatory scrutiny on AI and data practices, especially concerning vulnerable populations and the massive, often undisclosed, use of personal data by generative AI services. It highlights the growing tension between rapid technological advancement and the slow, complex process of establishing enforceable privacy and ethical guidelines.
Takeaway: If your organization handles sensitive data or deploys AI chatbots, be aware of increasing regulatory demands around age verification, health data processing, and transparent content moderation, particularly within the EU, and consider the implications for your privacy-enhancing technologies.
Decoder
  • Age-gating: A mechanism used to restrict access to certain content or services based on a user's age.
  • Biometric age verification: The use of biometric data (e.g., facial scan, fingerprint) to confirm a user's age.
  • Data Protection Officer (DPO): An individual responsible for overseeing an organization's data protection strategy and ensuring compliance with data protection regulations like GDPR.
  • Privacy-Enhancing Technologies (PETs): Technologies designed to minimize personal data processing, maximize data security, and enable data utilization without compromising individual privacy.
  • Digital Services Act (DSA): An EU regulation aimed at creating a safer and more accountable online environment by imposing obligations on digital services, particularly large online platforms.
  • Tech Sovereignty Package: An initiative by the European Commission to promote digital independence by encouraging the use of European cloud infrastructure for sensitive public data.
  • GDPR (General Data Protection Regulation): A comprehensive data protection law in the European Union and European Economic Area.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
‘This is fine' artist KC Green reaches agreement with AI startup Artisan

‘This is fine' artist KC Green reaches agreement with AI startup Artisan

Design TechCrunch
Artist KC Green settled with AI startup Artisan over unauthorized use of his "This is fine" meme in ads, highlighting growing tensions over AI's use of copyrighted works.
What: KC Green, creator of the "This is fine" meme, reached an agreement with AI startup Artisan after accusing them of using his character in bus and subway ads for their AI assistant Ava. Artisan removed the ads in New York and San Francisco, and Green took down his social media criticism.
Why it matters: This incident underscores the legal and ethical ambiguities surrounding AI companies' use of existing creative works, demonstrating that creators are increasingly willing to push back against perceived infringement, leading to rapid settlements in some cases.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
Photoshop is being eaten by the prompt box

Photoshop is being eaten by the prompt box

Design Digital Trends
AI image editing is making complex photo manipulation accessible via natural language prompts, but introduces new challenges in guiding the AI and maintaining image integrity.
What: AI tools in software like Photoshop are shifting image editing from mastering complex software features to typing descriptive prompts for changes. While this democratizes editing, it creates an iterative "negotiation" with the AI, where misinterpretations, unwanted alterations, and quality degradation from repeated edits become new hurdles.
Why it matters: This highlights a fundamental change in how users interact with creative software, moving from direct manipulation to a more conversational, directive approach, which requires a different skill set and understanding of AI's limitations and biases.
Takeaway: If you use AI image editing tools, anticipate that effective prompting and careful iterative adjustments will become as crucial as traditional editing skills, requiring patience for the "negotiation" phase.
Original article

AI image editing is making photo manipulation more accessible by letting users describe changes in plain language instead of learning complex editing tools. However, the process often becomes an iterative negotiation, as AI can misinterpret instructions, introduce unwanted alterations, and gradually degrade image quality through repeated edits, shifting the challenge from mastering software to effectively guiding the machine.

DEVOURED
Play with AI, Bring Your Ideas to Life (Website)

Play with AI, Bring Your Ideas to Life (Website)

Design Tinker
Tinker, a free mobile app for iOS and Android, offers a suite of AI tools for creating videos, images, and 3D models.
What: Tinker provides a mobile-first platform for AI-powered content creation, including features like product morph videos, virtual try-ons, 3D floor plans, and social media ads, available for free on iOS 15+ and Android 10+.
Why it matters: This app exemplifies the push towards democratizing generative AI tools, making complex creative tasks accessible on mobile devices for a broader user base, from casual users to small businesses.
Takeaway: If you're a content creator or small business, explore Tinker's free mobile AI tools for rapid prototyping of visual content on iOS or Android.
Original article

Full article content is not available for inline reading.

Read the original article →

DEVOURED
On mid-career satisfaction

On mid-career satisfaction

Tech Shreyas Doshi's Substack
Shreyas Doshi asserts that career satisfaction ultimately depends solely on personal fulfillment and the well-being of those dependent on you.
What: Shreyas Doshi, in his blog post, emphasizes that the true measure and audience for one's career success and satisfaction are oneself and those who depend on them, rather than external validation or societal expectations.
Why it matters: This serves as a reminder that personal values and life circumstances should drive career choices, a counter-narrative to external pressures often found in competitive tech environments.
Takeaway: Reflect on your personal values and long-term goals to ensure your career path aligns with your own definition of success and supports your dependents.
Original article

The only true audience for your career is you and those dependent on you.

DEVOURED
Why Ghost Buttons are the Ultimate Conversion Killer

Why Ghost Buttons are the Ultimate Conversion Killer

Design Webdesigner Depot
Ghost buttons significantly hinder website conversions due to their low visibility and weak call-to-action, failing to capture user attention compared to solid buttons.
What: Transparent or outlined "ghost buttons" are identified as detrimental to conversion rates because their design makes them hard to see and click. The article suggests replacing them with more prominent, solid, and contrasting button designs to improve user engagement and conversions.
Why it matters: This reiterates fundamental principles of UI/UX design regarding clear calls-to-action, emphasizing that subtle design choices can have significant impacts on user behavior and business outcomes.
Takeaway: Review your website or application's call-to-action buttons; if you're using ghost buttons, consider converting them to solid, contrasting designs to potentially improve conversion rates.
Decoder
  • Ghost button: A button design that is transparent or has only an outline, typically appearing less prominent than solid buttons, often used for secondary actions.
Original article

Ghost buttons significantly reduce website conversions due to their poor visibility and weak call-to-action design. These transparent or outlined buttons fail to grab users' attention compared to solid, contrasting buttons. This post explains how replacing ghost buttons with more prominent designs can dramatically improve conversion rates.

DEVOURED
All-in-one AI Video Generator (Website)

All-in-one AI Video Generator (Website)

Design Topview AI
Topview AI is an online video generator that creates "mixed reality" social content by blending digital app interfaces with real-world footage.
What: Topview AI offers a web-based tool for generating social media videos that combine digital app UI elements with live-action lifestyle footage, aiming for high-engagement, futuristic content.
Why it matters: This tool represents a growing trend in AI-powered content creation for social media, focusing on visual novelty and streamlined production for marketers and creators.
Original article

This AI video generator creates professional social media content by blending digital app interfaces with real-world footage.

DEVOURED
Procedural Tree Generator (Website)

Procedural Tree Generator (Website)

Design EZ-Tree
EZ-Tree is a web-based procedural generator for easily creating realistic 3D tree models.
What: EZ-Tree provides a tool at eztree.dev that enables users to generate 3D tree models using procedural methods, simplifying the creation of complex natural assets.
Why it matters: Procedural generation tools like EZ-Tree streamline asset creation in 3D graphics and game development, reducing manual effort and allowing for greater variety and iteration.
Decoder
  • Procedural generation: Creating data algorithmically rather than manually, often used in computer graphics to generate complex structures like terrains, textures, or models with less human input.
Original article

EZ-Tree is a procedural tree generator that allows you to create realistic 3D tree models with ease.

DEVOURED
Koto rebrands the Norton Museum of Art with an identity where art truly meets life

Koto rebrands the Norton Museum of Art with an identity where art truly meets life

Design Creative Boom
Koto studio rebranded the Norton Museum of Art around the theme "Where Art Meets Life", using archival elements and a vibrant palette to emphasize community connection.
What: The global creative studio Koto developed a new identity for the Norton Museum of Art in West Palm Beach, launched May 28, 2026, incorporating a revived wordmark from its archive, a Diana Seal from 1941, and a color palette inspired by the collection and local environment, using Centra No. 2 typography.
Why it matters: This rebranding reflects a broader trend among cultural institutions to become more approachable and community-focused, moving away from traditional, sometimes exclusive, art world aesthetics to attract wider audiences.
Original article

A museum brand refresh was built around the idea of “Where Art Meets Life,” emphasizing the institution's role as both a cultural destination and a community gathering place. The new identity combines archival elements, a warm and accessible voice, vibrant colors inspired by art and the local environment, and welcoming photography to reflect an experience where art feels personal, inclusive, and deeply connected to everyday life.

DEVOURED
How do you design youth? The Young Vic's new logo uses motion blur to flip dated theatre branding

How do you design youth? The Young Vic's new logo uses motion blur to flip dated theatre branding

Design It's Nice That
Venturethree rebranded London's Young Vic theatre with a dynamic, motion-blurred logo and custom typography, redefining "youth" as vitality rather than trendiness.
What: The creative agency Venturethree launched a new visual identity for the Young Vic theatre on May 28, 2026, featuring a hand-created, motion-blurred logo and using Modern Gothic by AllCapsType as a primary typeface, along with a warm color palette inspired by the theater's glow.
Why it matters: This case illustrates how branding for arts organizations often aims to balance institutional prestige with an accessible, energetic, and contemporary feel to engage diverse audiences, particularly younger demographics.
Original article

The Young Vic's new identity redefines “youth” as energy, movement, and vitality rather than trendiness, replacing its older graffiti-inspired look with a dynamic, motion-blurred logo that feels alive and forward-moving. The visual system balances the theatre's world-class reputation with its rebellious spirit through warm, light-inspired colors, custom typography, and design elements that evoke closeness, momentum, and the immersive connection between performers and audiences.

DEVOURED
This Digital Artist Uses Strong Contrasts and Expressive Brushwork to Create Striking Atmospheric Scenes

This Digital Artist Uses Strong Contrasts and Expressive Brushwork to Create Striking Atmospheric Scenes

Design Creative Bloq
Indian environment concept artist Raja Nandepu creates striking, atmospheric digital scenes using Procreate and Photoshop, notable for strong light/color contrasts and expressive brushwork.
What: Raja Nandepu, an Indian environment concept artist and illustrator with over 10 years of experience, including work for *Magic: The Gathering*, creates digital art focusing on mood, light, and storytelling. He uses tools like Procreate and Photoshop, employing strong contrasts, warm and cool tones, and expressive brushwork to build unique, atmospheric worlds.
Why it matters: This highlights how individual artists leverage digital tools to develop unique visual styles and evoke emotion in their work, showcasing a personal approach to concept art that prioritizes atmosphere and narrative over hyper-realism.
Original article

Raja Nandepu is an Indian environment concept artist and illustrator who creates atmospheric digital art, focusing on mood, light, and storytelling through expressive brushwork and strong color contrasts.

Digest devoured!